rui314 mold Heap-Based Buffer Overflow Vulnerability in Object File Handler

A heap-based buffer overflow vulnerability has been identified in rui314 mold versions through 2.40.4. The issue arises in the Object File Handler component, specifically within the function 'mold::ObjectFile<mold::X86_64>::initialize_sections' in 'src/input-files.cc'. This vulnerability requires local exploitation and has been publicly disclosed, with an available proof-of-concept exploit.

Impact

Exploitation of this vulnerability leads to a heap-based buffer overflow, causing a segmentation fault and potentially allowing for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by building mold with release optimization and AddressSanitizer (ASan) enabled. After building the application, it can be run with a crafted object file that triggers the buffer overflow. The AddressSanitizer will report the heap-buffer-overflow error, indicating that the vulnerability has been successfully exploited.