Heap-Based Buffer Overflow in rui314 Mold Object File Handler
CVE-2026-3994
Key Information:
Badges
What is CVE-2026-3994?
A heap-based buffer overflow vulnerability has been identified in the Object File Handler of rui314 mold, specifically in the 'mold::ObjectFilemold::X86_64::initialize_sections' function found in 'src/input-files.cc'. This vulnerability affects versions of mold up to 2.40.4 and requires local exploitation for successful attack execution. Despite early notification to the project maintainers about this issue via a dedicated issue report, no corrective actions have ensued. The vulnerability has been made public, increasing the risk for systems still utilizing these affected versions.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
mold 2.40.0
mold 2.40.1
mold 2.40.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved