Binutils Buffer Overflow Vulnerability in Cplus-Demangle Function Allowing Denial-of-Service

A buffer overflow vulnerability has been identified in Binutils version 2.26. The issue arises in the 'gnu_special' function within 'cplus-dem.c', where attackers can cause a denial-of-service by using crafted PE files. The vulnerability is triggered by a heap-buffer-overflow, as reported by the AddressSanitizer.

Impact

Exploitation of this vulnerability leads to a heap buffer overflow, causing a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced by compiling Binutils 2.26 with Clang, using AddressSanitizer to detect memory errors. After compiling the tool, a crafted file named 'poc3' can be piped into 'cxxfilt', which will trigger the buffer overflow. The crash can be observed in the AddressSanitizer output, indicating a heap-buffer-overflow error.