CVE-2026-3994 | rui314 mold up to 2.40.4 Object File src/input-files.cc initialize_sections heap-based overflow (Issue 1548 / EUVD-2026-11537)

A vulnerability classified as critical has been found in rui314 mold up to 2.40.4. This issue affects the function mold::ObjectFilemold::X86_64::initialize_sections of the file src/input-files.cc of the component Object File Handler. Performing a manipulation results in heap-based buffer overflow.

This vulnerability is known as CVE-2026-3994. Attacking locally is a requirement. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.