CVE-2021-3402

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4

• CWE-190

• https://bugzilla.redhat.com/show_bug.cgi?id=1930175Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKNXSH5ERG6NELTXCYVJLUPJJJ2TNEBD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/
• https://www.openwall.com/lists/oss-security/2021/01/29/2Exploit, Mailing List, Third Party Advisory
• https://www.x41-dsec.de/lab/advisories/x41-2021-001-yara/Exploit, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1930175Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKNXSH5ERG6NELTXCYVJLUPJJJ2TNEBD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/
• https://www.openwall.com/lists/oss-security/2021/01/29/2Exploit, Mailing List, Third Party Advisory
• https://www.x41-dsec.de/lab/advisories/x41-2021-001-yara/Exploit, Third Party Advisory

Published

May 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-33981An insecure, direct object vulnerability in hunting/fishing …4.3
• CVE-2021-33982An insufficient session expiration vulnerability exists in t…7.5
• CVE-2021-33983Buffer Overflow vulnerability in Dvidelabs flatcc v.0.6.0 al…7.8
• CVE-2021-33988Cross Site Scripting (XSS). vulnerability exists in Microweb…6.1
• CVE-2021-33990Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&Cur…9.8
• CVE-2021-3401Bitcoin Core before 0.19.0 might allow remote attackers to e…9.8
• CVE-2021-3403In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef…7.8
• CVE-2021-3404In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows …7.8
• CVE-2021-3405A flaw was found in libebml before 1.4.2. A heap overflow bu…6.5
• CVE-2021-34055jhead 3.06 is vulnerable to Buffer Overflow via exif.c in fu…7.8
• CVE-2021-3406A flaw was found in keylime 5.8.1 and older. The issue in th…9.8
• CVE-2021-34064Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…