Security vulnerabilities and automated fixes for binary parsing issues
2 posts found
A missing bounds check in the gettext `.mo` file parser inside `compose/asc-utils-l10n.c` allowed a malformed or truncated file to trigger out-of-bounds reads from heap memory. The vulnerability affected two distinct read sites — a `memcpy` of the full `AscLocaleGettextHeader` struct at line 131 and a 4-byte offset read at line 224 — neither of which validated that the source buffer was large enough. The fix adds explicit size checks before both reads, rejecting invalid files with a descriptive
A critical heap buffer overflow vulnerability was discovered and patched in archo.cpp, a Mach-O binary parsing component used in mobile app signing toolchains. Attackers could craft malicious Mach-O binaries or dylib files to trigger memory corruption, potentially leading to arbitrary code execution. The fix adds proper bounds validation before memcpy operations, eliminating the ability for attacker-controlled file content to overflow heap buffers.