CVE-2026-88340 | VirusTotal YARA 4.5.8 Deserialization yr_rules_destroy memory corruption

September 22, 2026 Yanac

A vulnerability marked as critical has been reported in VirusTotal YARA 4.5.8. This affects the function yr_rules_destroy of the component Deserialization. The manipulation leads to memory corruption.

This vulnerability is listed as CVE-2026-88340. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More