CVE-2024-26230

This exploit PoC demonstrates a use-after-free (UAF) vulnerability in the Windows Telephony API (tapsrv) to achieve arbitrary code execution. It manipulates RPC calls to trigger UAF conditions, leaks memory addresses, and ultimately loads a malicious DLL via LoadLibraryW.

This PoC exploits CVE-2024-26230, a vulnerability in the TAPI service, by leveraging RPC calls to trigger memory corruption or arbitrary code execution. The code includes functions to manipulate RPC bindings and craft malicious requests to exploit the vulnerability.