CVE-2017-9438

CVE-2017-9438 is a denial-of-service vulnerability affecting YARA 3.5.0, specifically within its regexp module (libyara/re.c). A remote attacker can trigger stack consumption by providing a specially crafted YARA rule containing hex strings, which is improperly handled by the _yr_re_emit function. This vulnerability carries a CVSSv3 score of 7.5 (High), indicating a network-based attack with low complexity that can lead to high availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.