CVE-2016-10210

CVE-2016-10210 describes a denial-of-service vulnerability in YARA 3.5.0, specifically within the libyara/lexer.l component, affecting products like virustotal yara. An unauthenticated remote attacker can exploit this by providing a specially crafted rule, leading to a NULL pointer dereference and application crash via the yy_get_next_buffer function. With a CVSS v3 score of 7.5 (High), this vulnerability is easily exploitable over the network with no user interaction, resulting in high availability impact. There is no evidence of active exploitation, nor are there known public exploits in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.