CVE-2020-17086

This PoC exploits a heap-based buffer overflow in the Windows CNG (Cryptography Next Generation) driver via a malformed IOCTL request, leading to a potential local privilege escalation (LPE). The overflow occurs due to an integer truncation when calculating buffer size, allowing controlled heap corruption.