yara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

GHSA-2jx3-ff3v-j7jj

osv · GHSA-2jx3-ff3v-j7jj

• https://github.com/VirusTotal/yara-x/security/advisories/GHSA-2jx3-ff3v-j7jj
• https://github.com/VirusTotal/yara-x/commit/25efa375572efcfbe880a263ee3b0932d4b61a24
• https://github.com/VirusTotal/yara-x
• https://github.com/VirusTotal/yara-x/releases/tag/v1.19.0

No related changes are available here.