CVE-2026-3994

NameCVE-2026-3994
DescriptionA vulnerability was detected in rui314 mold up to 2.40.4. This issue affects the function mold::ObjectFilemold::X86_64::initialize_sections of the file src/input-files.cc of the component Object File Handler. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
mold (PTS)bookworm1.10.1+dfsg-1vulnerable
trixie2.37.1+dfsg-1vulnerable
forky, sid2.40.4+dfsg-2.1vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
moldsource(unstable)(unfixed)unimportant

Notes

Crash in CLI tool, no security impact
https://github.com/rui314/mold/issues/1548

Search for package or bug name: Reporting problems