What’s Vulnerable › Vulnerabilities

CVE-2018-12034

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-06-15 · updated 2026-06-17
• Weakness: CWE-125

Description

In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c.

Affected products

• Yara Object: through 3.7.1

References

• https://bnbdr.github.io/posts/swisscheese/
• https://github.com/VirusTotal/yara/issues/891
• https://github.com/bnbdr/swisscheese
• https://bnbdr.github.io/posts/swisscheese/
• https://github.com/VirusTotal/yara/issues/891
• https://github.com/bnbdr/swisscheese

Get alerted when CVE-2018-12034 or the next vulnerability affects your stack