cve/2021/CVE-2021-3402.md

CVE-2021-3402

Description

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4

POC

Reference

• https://www.openwall.com/lists/oss-security/2021/01/29/2
• https://www.x41-dsec.de/lab/advisories/x41-2021-001-yara/

Github

No PoCs found on GitHub currently.