OSV-2024-1274
Segv on unknown address in yara_yyparse
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515523
Crash type: Segv on unknown address
Crash state:
yara_yyparse
yr_lex_parse_rules_file
cli_loadyara
What each source reports
OSV No score
Segv on unknown address in yara_yyparse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376515523
Crash type: Segv on unknown address
Crash state:
yara_yyparse
yr_lex_parse_rules_file
cli_loadyara
- Record
OSV-2024-1274- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavOSS-Fuzz |
Listed versions, plus commit ranges clamav-0.104.3clamav-0.104.4clamav-0.105.0clamav-0.105.0-rcclamav-0.105.0-rc2 Show 38 moreShow lessclamav-0.105.1clamav-0.105.2clamav-1.0.0clamav-1.0.0-rcclamav-1.0.0-rc2clamav-1.0.1clamav-1.0.2clamav-1.0.3clamav-1.0.4clamav-1.0.5clamav-1.0.6clamav-1.0.7clamav-1.0.8clamav-1.1.0clamav-1.1.0-rcclamav-1.1.1clamav-1.1.2clamav-1.1.3clamav-1.2.0clamav-1.2.0-rcclamav-1.2.1clamav-1.2.2clamav-1.2.3clamav-1.3.0clamav-1.3.0-rcclamav-1.3.0-rc2clamav-1.3.1clamav-1.3.2clamav-1.4.0clamav-1.4.0-rcclamav-1.4.1clamav-1.4.2clamav-1.5.0-betaclamav-1.4.6clamav-1.4.5clamav-1.4.4clamav-1.4.3clamav-1.0.9 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2024-1274 is a vulnerability with no CVSS score yet in clamav, published November 5, 2024. No source lists public exploit code. A source reports a fix.