CVE-2021-24086

This repository contains a functional proof-of-concept exploit for CVE-2021-24086, a NULL dereference vulnerability in Windows TCP/IP stack (tcpip.sys) triggerable via maliciously crafted IPv6 packets. The PoC uses Scapy to send fragmented IPv6 packets with excessive destination options headers to induce a denial-of-service condition.

This repository contains a functional proof-of-concept exploit for CVE-2021-24086, a NULL dereference vulnerability in Windows TCP/IP stack (tcpip.sys) triggerable via crafted IPv6 packets. The PoC uses Scapy to send fragmented IPv6 packets with malicious extension headers to cause a denial of service.

This repository references a fuzzing attempt targeting the tcpip.sys driver in Windows, inspired by CVE-2021-24086. It lacks actual exploit code but provides a technical reference to a detailed writeup on the vulnerability mechanics.