CVE-2023-40857

Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_execute_cod function in the exe.c component.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

1.06% chance of exploitation in the next 30 days, 62th percentile

Published

2023-08-28

Updated

2024-10-02

Proof-of-concept exploits (1)

• VirusTotal/yara/issues/1945

References

• CVE Record
• NVD entry

Related

• CVE-2016-10211
• CVE-2018-19974
• CVE-2018-19975
• CVE-2018-19976
• CVE-2019-19648
• CVE-2021-45429