CVE-2026-88341

A flaw was found in YARA. A remote attacker could exploit this vulnerability by providing a specially crafted compiled rule file (.yrc) with an invalid arena configuration. This malicious file, when loaded, triggers an assertion failure, leading to the application's termination. This results in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, ensure that YARA only loads compiled rule files (.yrc) from trusted sources. Avoid processing or loading .yrc files from untrusted or unverified origins. If YARA is used in an automated fashion, implement strict input validation and source verification for all rule files.