Floooh Sokol Stack-Based Buffer Overflow Vulnerability in Pipeline Validation Function

A stack-based buffer overflow vulnerability has been identified in the Sokol graphics library, specifically in the function '_sg_validate_pipeline_desc' within 'sokol_gfx.h'. This vulnerability allows for local exploitation, where the validation logic can be manipulated to read beyond the bounds of an array, causing a buffer overflow. The issue has been confirmed by the vendor and is present in the latest rolling release version.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing a program to crash.

Reproduction

The vulnerability can be reproduced by compiling the Sokol test harness with AddressSanitizer enabled, and then running the fuzzer harness with the provided input that triggers the buffer overflow. The AddressSanitizer will report the stack-buffer-overflow error, indicating that the vulnerability has been successfully exploited.

Remediation

The vulnerability has been fixed in commit 'b95c5245ba357967220c9a860c7578a7487937b0', which is available for download on the author's GitHub repository.