Impact

A heap overflow can be exploited when a malicious mach0 file, having bogus entries for the dyld chained segments, is parsed by rizin

Patches

The problem has been patched in #5770

References

• #5768

• rizin/librz/bin/format/mach0/mach0_chained_fixups.c

  Line 200 in 6dd0dba

  size_t max_count = RZ_MAX(bin->nsegs, cf->starts_count);