{"id":"CVE-2016-10211","details":"libyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted rule that is mishandled in the yr_parser_lookup_loop_variable function.","modified":"2026-04-11T03:36:58.820577Z","published":"2017-04-03T05:59:00.317Z","references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/98078"},{"type":"FIX","url":"https://github.com/VirusTotal/yara/commit/890c3f850293176c0e996a602ffa88b315f4e98f"},{"type":"FIX","url":"https://github.com/VirusTotal/yara/issues/575"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/virustotal/yara","events":[{"introduced":"0"},{"last_affected":"c8571453e39913267e7042096d03bee040409b9a"},{"fixed":"890c3f850293176c0e996a602ffa88b315f4e98f"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"3.5.0"}]}}],"versions":["v2.0.0","v2.1.0","v3.0.0","v3.1.0","v3.2.0","v3.3.0","v3.4.0","v3.5.0"],"database_specific":{"vanir_signatures_modified":"2026-04-11T03:36:58Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-10211.json","vanir_signatures":[{"deprecated":false,"signature_type":"Line","signature_version":"v1","digest":{"line_hashes":["78547407036798026709529474180674643879","45085559934819371629407210798598310719","182247852708401705320344586692123502150","188576736582919678498475644818988376142","33157022625833423067320137329147505222","3457566451105010362499312227064571578","339898123344774889360889726070732596125","126028933767065356649300883721140625503","213079507987040387071718956855152065291","18544113599559356462461204518713815025","211140295435914629082363375057369100463","23984693586908963973317352253444234394","308938105161927390826477528985007775577","156353018444836573600457214144171655346","282080614567693351353313299894615254084","130597950301244546546340977751317169273","138677131460559957846838374451542392496","149672740419652166718226890709253413935","134103514040049590549902476871423696339","118095585050397302016777998211595085075","281904924593921055125378867085483688672","110758604419691710323328019084273544879","111392228151472912919017024187897685209","123199147779588420681826896470237324613","37484687366449331398755163277376228085","271722348316295943121369395188976660093","129942104110047396085800746647108245010","254316531494603316001203972085785224038","12824338711600290970828559457527863851","102012625138522583386479139229889579824","324340744322450335135848399226050740613","107288183092870762352180437226067803917","258480052023373008511755157982523204446","97815260973892435825187150253223978268","170220628809845985289253209797450671414","289774230105079733420103943621419110769","132397101567805196085337273846584105419","257991970240071787345525642734529525794","158939610144549485708228419685205365048","166057481239484690852413935899877528360","301031919470796412357220672778991106065","14572121973944843571048875061390584103","318860379571333428912296715621797323804","262803787786166823826769255580049925837","226379406512475479521778919041787709765","239649010200474496253199639684595105011","216867366173836412746589770610082711563","141946539136470295395160650860232042205","196138442578736862475108055412980070656","325809254406769482495335440453500919180","302964510491597738119420385435000979658","67251730851355524581267647693339158479","103358410022692921828615695841875377097","313758032667961603406670164612823120398","55477230761937301904083117901266148117","216675428822918647451385121359839878399","278082181951508136500319236155766974461","296800156873772483159257243521226850234","166765405122340993066545789124407785484","40681705450729871889970648565031256308","37341385322858324480875904257909771912","284200168496347207412986321077684654560","209608253110543066004250934579793169683","62216909549175054813676175769723969389","182599347857927091126562812714156312350","124108023416408535682795542361900914519","171337881189208210210648226063047422187","126268913980449795715065942467227368894","322908271348384407913280755082567891915","214270241044207952879755696350194118529","133142764919423201507920872892995095447","306728035391842128756930170394065035855","139210622070187914418051932414042486372","282317505276993362269927908661511928729","205249350415979986705371572214095630972","32057500422799933663308592703440105958","13836189676885472094809306438473765971","273684173204598305243614100333261954924","75060582806962719540137270315333548306","111043743616500121973049567739432307849","214690948122349475088206563232114580238","141257143648293693744781619341702093475","235827238939642836363343484596960591266","250238054095771087575887925728130752171","169217240820674122838470028036568500405","282473113060959113044936007246575466465","199559863464134554894131064972240504049","329630885629791867914090337043967325452","135799395450158059789671704446854284004","332569525308828591328120096000219154821","220110687063409260974435292554058658716","67062402992532874777572619557982375484","208326328450512677427871938127647867281","153592833428941368593649816361969193448","97347981970206584486318595642032427445","214697343234115104643187224966692699975","205903564916978737664934759196335659671","223021200706453135938195575393089164102","152029941938234069709793278534943988087","100803547044686432241156846513782622447","69423709774275157189227574893494361053","44720766444557845321686032849933548354","12954513550271836985876732994191784040","184750263820070757884637263369744571074","224040909218328330714100924778995731479","64119323302761449373621808754960791979","107272727401523686327403377750462043905","221252762666658377487601732917783321187","46886693365922081024323694941751332712","321764042857295330401779090458872487906","74550789298968172244764474194464152237","117254716105939127923880460693117072801","19535298858421278397739285481515868804","301182642739197923611203378728573293641","201348520182317444398736239201112806924","83480798388054189467620580997810680199","236663352904627343233425685589177495459","142155699212122959692314342269279848339","318780829620479579139640641320464754051","4043818137832831774383499630822616098","55641687627873264261734895443013934941","138379619475471062060286619717935072480","330010527953871912464081259936204541558","121015386117639317100366465222815581670","323714829264025029042521760468294569074","5878536310697975252339887970472495795","334553728127375989142895625203546641082","176494194239104283257801275509408400114","312347721321108248468226019103770915701","54135825818133128207322255588286805858","273902388400243342770579867212801255777","34552063051142006038447088405607354836","151936727320140870553498705920862936484","225411395170009146608164011238960234826","247648236881406452582004915250990570989","66789828704124135961624149567287301195","109480541615421858658288357031757139782","186207150932812098411790811489839486158","200260031631711619562451416462414782888","135808622315617308447855795690696114534","108353936248661938055823660852839892077","37347954727026932542572230318239516155","145522165965283671575827466394193635495","226813177782465371777197539284712634918","145522165965283671575827466394193635495","216122409603308113653824277856451375528","224318773764963072364898563985378851275","320351607969917065612627834313417447586","225267225067507494981643820857476934655","316554704433370977338621337873157422904","285848305768060050916685598493658547790","291196779600998786948237489517410550511","96640954376622164879835177252929107693","336319272583364549607738870428617115152","215042558758499413554062980670481521289","242632964802285221149062258816831590251","226165538545438566989648034636895223379","334430334848987117705126752489522518100","225349129596289322463683025473423765959","201837231379930310123650223937297934098","327590898122702460627322750187463797288","283614728842617157429373259367482273611","118770699362956305395018935151290289628","54001574236100967237231775565494385687","10051549543334078762431355679548948350","173500290916384711727095410623289413342","67147386724976225315334465158416572224","141339607706218974741758864954458586655","87210876902877847503585349309849460797","90263811314105380214197932611593010809","288470910097239799406957873504997284740","2786568604500477972350421500829789454","15065950660409329947797654737574587693","57964438554535695051783382891177361734","80101804517505067163115792702485389219","26192316750722482170850487414824426594","284158594266026683958060971024698948632","223617501489074956181535451151209561956","26308061264318681481526672462303140378","301335782075105961298736639465692976330","170833821158089546960049620353727485061","257175573223971714024503703583796646129","155775098258437741772122545702008639216","86563691493947198148318035492584484660","281980621387878866576101627283258407042","66760361195921878221963831683567842023","296615490963553491113621246039435373262","109788805924784941159958193155245045939","250906173653098044823791655692045000491","130772806550502237327967843372205118826","126954669767821054930115115047902144180","94215759526107972129216055738690590892","199988750588846533713119258538269891154","246004305066673432960416915388232148842","89738125180131067253379757139697347863","287740092085869473402319224791999781299","152587159486468530322614728361350540588","105023088975300844336798134104361506097","195834885530360437317705983374823390731","182144411716903824490354676343879305974","107973546699361116477247292535275879671","294750552637759209520369349317049468734","58388060440551486733324896129113577601","56882199687704768120993814827549946659","216425563199646481696958839175879769722","23635608328932885853346205202266124112","147960281067205594999753530703758548700","15135765186379693911418171805541809533","340156111787519651825532663639417256572","303805772734957422205531709946647685336","57780478589821977784961758595428835159","266446220640069164146007172617125661724","14111657996630688341734962473615032592","329386800789238809919900647228516376","74750771444920054675619033932585371422","144571922791532208463460774980503869590","172779639164502873110910834673852155334","156993815766883945152126086862543194590","176137916688667479284120363419342866091","39280469377301487551813062035270056831","194662301592613641527085547410727308491","219882839859744502902586865262808633231","298039097193482654162260524610461109855","266717207937388459727392867265806506802","66946488399034703374684921136305351258","312290102117830562999218867876147417349","145610201168593852926550285358951561264","253651181254715838616516721796346997622","227435140804765841136771993923794431352","71651900737483043754172282542821728763","317176569941996663624805095969925111809","162355382065458581968696919468447698832","136946641157680935103388405887090873055","231273168829398327263087432505663638322","231465811719037862554598035348912988476","75936662480616836670861122837730401727","212146193722562545765608017767566457327","157029966551865208174294471934648591322","148531405383220678686931481051965187495","41235364161360246253609266899212601774","244673781819195718712309260494279413981","18470126124916107270031754518793563564","340241888908911612169728942456933915337","187065058605654885811308884005298508813","181837219478021977333750101876680453670","72949410712419743497712602124799520983","6553444809468924149096838194420783751","47978130222201144596342159103573896260","227109404970869397011665354894427631055","224140823769010702554319259931037342834","332782762494748856873898177412391102164","137118411204536236344637484913868157031","13151085142553129041873575400530420729","197437779677549266999353179971667703637","195610893897682956960016979510582657695","146772607434934085484970259521573876985","322326059393213522376389678529883858171","219832144758256330677604846334613492094","33192218485039017147556588390836173264","137930952462919392473538585084001101834","59818486287249852004795402020758708460","251691923250097928282838084423864456972","133871887399183007269869808958456457835","82049178867724864987213364001029468565","125396854969133630053253468372277301477","173810575938518948104372686316724134990","107524361652497806353810967192552185449","159703638917644305642276568917235423056","39751085894761692362708003709887500398","93602496903855823466270319347908085186","95701265480328396875544317212217694996","178059946244934057792137477141721398661","242166082511916523252446366998466717113","312875778715236356914584300414777105793","285386310839242091070339036247142709351","85469017083053590655294360010406836423","17693457756656036461545554156838190733","286789727018679416566321291870672180085","88324893009745562414248044345188573739","68162337980752309117536205604901136531","74911174008612788546191671019072517305","248908286361455719659362543345286676553","216242974477317469301758023954820388724","296001318239835041677050446341392027110","121973923489501861454590372579709841674","104912471832031844519683401263365571099","283169532251031193246327464647044426258","47937455833021563851526261452889839695","207783174887702829456464420158271225085","118297155407350816577971973116844450824","303935130216903814839371115747552841134","277022690357584739890217768069168543495","80308680460465483648362851869903795343","43927461055147190462286552382899065825","22439927736816297128239530259133990553","24006163597599707272242831041068160950","97649167291327114074861530265414350698","165140991109936816853120852412653453950","223143695191294666876245164358315610939","113176546063938973405338063766684426748","132627803174162338878660243177083942912","322618864006379656000438478763913032942","43885583891215654155902136254274704382","17764508930047281426322147304524183503","100840126879068742032701966177201201274","128135502623170429411718046041016166168","135020452058141160391909604171385703801","177062609195933901308197582771506167355","137938145437622216739633883914056090330","133813431817076728985518838096730337828","38657881616675499581927072926635223951","71655642218258367751755162714660615874","93982197447491727612606409457530576283","299486929306386882993339091687177244829","75297696660661110162956815412566704324","132674691344745953928688138263066790839","238690964080654009993785279725285779576","258502219072505232272998055533592926597","73054138655555406797690263380257910645","47794121719541044491398077765233797488","33767618175990834363321283330756908640","58558311298070585744289267068508391194","158388356448245762483231512619244895714","159473078649141914618021775170915503698","5354387659747787500569825958050165188","75889113421365953827914088593807860025","152283019918821719967536671864818918292","71993136160691749420901626849187390440","269182489184054331056133378155131013407","187512747645097803567636022751914925933","241053852894200724091951434698172578254","67269920262727549803797807361603024497","230750457954753986797304490834487928458","130211369574285814284809930366538953690","301281242989969673126060270067467431212","161300093804288957982335810658330375095","322406501777012602333266816144647998293","91485987882020289341145044838956559893","220012194650264546900296119904218083573","124026966297974249860754978513825530597","281128413753330234521752356347695359479","255028813601582367305059652487717363191","35510816987085268291136723274052514693","251872488115327549499132581847021218254","338777980182488301500054209342078487032","165252876280641580670134288242636914028","335523126745351019302106515015709791370","32776755747771115888066160746963980186","323119626229146675479982070562674335163","218219641746738785249726329117442638281","93454942624290040696808034921004524166","219804257932980489462773958332792835878","70921233020014623290942081728107643448","46906100566418368827688124441803570481","288568989230516854781130022347636400280","243816382206279182458891358077854815511","243918867465402138675410650281239386889","125877068428281466675738987923415859800","24572564290925797294101166277610988804","187691341803943080493566600256101028194","76820356258643019044669684903083496985","150403955995702877495800628751695232033","163530832401663763830775133113742696970","242720553242711791495410135764868869498","282693082188118283984927347572020538468","180755581137844852181464721148594680487","40569815599744232814326489906080221782","99123015354967954774863349995729170228","186812615300877720238735486497740255053","134646567287012777946760454097646730811","10480700047874525477052827781062517540","92423899879399895433552451655156768430","228472826894749732600750131715889512813","245371237532719204199685068664062695266","4471145892854260638272137405531752460","129342484301780132266999502304543930055","114280987826866321489882795988490435131","75271782766897492866522162015309609453","301535622412534334820113577793897487837","312753867765131747161688390823312226665","12258519257234423716343256552281806803","45575594413777569859461785943712310154","165374533294689868959012378871377767741","202333334907947937265653526211399213242","97472286951247614319299281673464573957","114280987826866321489882795988490435131","75271782766897492866522162015309609453","89107226454115445051063424856984256998","205918994529562308832582491821881157812","277372589637881258336022071879843312152","299360531957348192015826952634542672733","70155863659626770350095500883472749995","310742910847398062617175870702939806864","91364279556777988961553453342885119714","120837918361664189574861394843959872170","296233165959491631281479900740836616931","26508387885927316977411554528368651967","77273088355396909409676989407254521365","175947368564962397785596129115795172663","182483056880425425106550730177350630581","210184040396799246210790230153241997186","19226318161871120121701480608287749536","35772677563509983285577183568690062247","306652242337540988421397510532026691886","58489183679628569376207303080620252830","39231737441406455350850072361343408476","120177291397657735974671673013267869122","111999911144557021233799812473357770589","225217245805127496974040518253794860920","11669578904883411159462506477464665783","282381465854842511825149474188873996327","74945983165282267847546697208839807358","91838113112501993995872011073630611296","237302878672010119812615304826653477550","138796787297545790870673527119081095418","242622545911196158891859333063081690777","287844831247121181260043009164075565988","113759876480964852138307545591424822583","234260832378854485752460850903947037446","329197260170090592629263766990547910709","66640439957113566706414125681659405086","196595428504781608983370792153685038510","291863700852227190708438857671331191707","134716637959648711187357699473528675009","154088463372656148210705231321982055376","180060674144403530212355888818999182545","121637124417028187527859889872246729944","265999871552003118844480099860916920629","218415667463818853280220486410308089510","237476485199868262648777199857329907049","205558435105878343664183848153139752053","273205030655300963383755526468291333959","24596873924325846781037750304212997890","204872763254895332894526728794225874786","121865814562951529425028129947702327171","296863146969641654226066097277905938060","171472333524267963270089616603995767627","128481077152284116171714341850885745719","5839414420610836542172320005799586859","62967492741060983980982333191974736586","206145729148309071535566578852046962624","68306825431687289654464856558431137424","18497902316437007332804990932536661425","31259549974457290722733628051066628255","16038373889259404065053403810924710809","19532137401290880754607583513333253498","191963008178550056387532331379629591023","145246671650583339805032105644645451898","268298500657065757943407702119616054070","104319430429138347478352892875698552835","269438592976419051475055185674399037299","95768389709366656279193505552301914044","213492561353930065666826498502208702684","311801694211477791514624416185512926966","26034887869272362424701536616679464611","125713987774643174829944428869121454769","301240546902035974089075169612117020700","45259132195108441281999086103762371607","199567455160429240535380632412042235726","120904189459900853170425214791722529557","202329913564906170264947307047072670083","209802922929299574737021988138672765904","185981947656938494626646479399692101407","239750878754593518633163055922947412924","9258563653653661314130748301201341509","331683190788198635192379303904644470369","249148349356805008102705858808673971046","26184553448805018713739734817977132986","169958249755028085459140362881549901077","16903727974960268251513929525693943084","73874557109570294886267507450826396493","247576453558492438083227181520660641267","276184987682144699579956812298695444539","225127222013058640803841328457571690550","26132951878849970583936808075731704493","20799212039905761483356387775565970654","216644414666196381954455776282645056472","98352205866591470546985945001191925042","249903950102799506763398718129251975943","284169099565045876552179878959297168909","334068283964448505352360789548198626274","194814169441408934259969586697297294988","35524345392072198291616476375170258691","273325279560341092632654070864023619806","213034042071849002488028092872729870494","223570383365457785671882753032704114012","210667961217328452287401390582880116307","306356285821019406530638351910008800230","65871977629578103497692285630688570111","323969769621012149801950077637315844089","10840641960559059674180126029844208195","301729401577182885298241984239059161556","296291170265789732352903845690477410316","206486075629859425964077865932938349762","77140823231108868700960493332333122820","221784967299290056055160807669221348125","55681813290502143535821896463956350676","253896473783896430934414521267955219814","334755604517265042979668754160818265974","159464646873824183000518674882739985409","77041416198374755297883911999503473433","246248905617668564834683108261518803183","89671257997899657439114782694635594937","163040102354123330569615027244937597527","251365578118842331865783201607963618112","222063315230923981536418141976015916952","8188223009724562098290797626161080747","291586481123109698606083908854675065399","297455529011570284626047141008178501114","290405835404212271430184087989842438144","70026364711187746229602132393204675006","99956408231886742949792426907031472699","296211979386651940939184715498078378459","153680423858175323533944490511928762009","228611859927562990400259759379768639418","292888283180732714397441225501229613616","30451413208672697963807091544316073782","14021186590751505138155011443088125342","53846088705404179298694977874634025417","138571730174630623088719003080506156192","18106928381508136110241403862925884286","252879773558686459831347472361871418657","202286818954520662830414748663666833566","12983780156187493618450141438877495376","186862591604947006190477376895612441143","200512905891538387012902397109523924382","34693574954921918137368274513562572157","330834614321379840079395377062509571562","202736405167667854224978359002716205328","87639158957843741772581859807790051157","209478430283491923330220842822350129801","96713881274163638926653021498878159297","136027885994567537040679939650668847638","89038545638428530771301259800276940275","286407581810769222938163913792040366516","166962045844986946551297373709582542519","204115269295120075119861024018079864943","331337729855461080625834367165913327492","238388060448463472867949009537991548457","297251583982558062548132002693264444632","307212406605580887869199768296235123755","201161099016451741712128077528692807869","10109388629868182395191048692665729793","142720581201815171076879796083089646961","165161651770463537188587613296614377981","54560494401363082190158757346993799952","150781604439472203009526487938620182346","91132960254308811781193046354828325554","279237496852999244253907393265435601334","119550551534815467806956713514229514306","84686061526627920523052509710124319520","321694768953746894705550217467187015395","28760408548229727308088481509727584184","107008989985643883292222216389809252585","299883374064859852434278002684722379419","54248389643161129298274204862533839165","188455413152350655712239822409826729545","534331251593274655382462428214310582","314261473990021394866038840843242387367","15972269335111595832699593240784023872","12229161062365371812480576304557738214","207782335726080047272388451181935995424","130036291398626917069458321533939276593","285389611831290354363956402263830332239","29039528176148762195146434170192360197","340166267233113663336796075067965762197","297243401076901260028787796493245435130","192979414385748867537071828008443192039","73395607698753405714597534051378522102","65573689142155441243887906892268636136","66189140389995416630630404954540661551","219966964862635683877842033287307682774","170557013241358885718709086771218347784","316823982788800355973805884209637142568","110786997586763972633870651296446252705","50302881233562844533682494671016443055","332481306596338243153557973428057675659","225443664911056276505702875096770327364","108868665259784011351711698026841827436","11358696525105578959847530907337391849","64968762937873641912218986866711808215","143242587116954521937160262135755697206","124869426454047602318669828279640778677","85421767101268375255663525331851759451","178806397899278160408621682962596278151","152683469247828404831742195506610886221","245311246549723047269696172873376985430","51381902187578051246507453589672415681","66617307300245033004473713345969630470","15742447105667327709129320874809572539"],"threshold":0.9},"source":"https://github.com/virustotal/yara/commit/890c3f850293176c0e996a602ffa88b315f4e98f","target":{"file":"libyara/grammar.c"},"id":"CVE-2016-10211-35ce256d"},{"deprecated":false,"signature_type":"Function","signature_version":"v1","digest":{"function_hash":"212240746105247533956051900466920549300","length":46561},"source":"https://github.com/virustotal/yara/commit/890c3f850293176c0e996a602ffa88b315f4e98f","target":{"file":"libyara/grammar.c","function":"yyparse"},"id":"CVE-2016-10211-86055253"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}