Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

Untriaged
Filter by:
With package: mold

Found 1 matching suggestions

View:
Compact
Detailed
Permalink CVE-2026-3994
5.3 MEDIUM
  • CVSS version: 3.1
  • Attack vector (AV):
  • Attack complexity (AC):
  • Privileges required (PR):
  • User interaction (UI):
  • Scope (S):
  • Confidentiality impact (C):
  • Integrity impact (I):
  • Availability impact (A):
created 1 month, 1 week ago Activity log
  • Created suggestion 1 month, 1 week ago
rui314 mold Object File input-files.cc initialize_sections heap-based overflow

A vulnerability was detected in rui314 mold up to 2.40.4. This issue affects the function mold::ObjectFilemold::X86_64::initialize_sections of the file src/input-files.cc of the component Object File Handler. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

mold
  • ==2.40.3
  • ==2.40.4
  • ==2.40.1
  • ==2.40.0
  • ==2.40.2

Matching in nixpkgs

pkgs.mold

Faster drop-in replacement for existing Unix linkers (unwrapped)

pkgs.molden

Display and manipulate molecular structures

  • nixos-unstable 6.3
    • nixpkgs-unstable 6.3
    • nixos-unstable-small 6.3
  • nixos-25.11 6.3
    • nixos-25.11-small 6.3
    • nixpkgs-25.11-darwin 6.3

pkgs.mold-wrapped

Faster drop-in replacement for existing Unix linkers (unwrapped) (wrapper script)

pkgs.mold-unwrapped

Faster drop-in replacement for existing Unix linkers (unwrapped)

Package maintainers