Exploitation Summary
EIP tracks 1 public exploit for CVE-2026-35330. PoCs published by Lukas Johannes Moeller.
AI-analyzed exploit summary This exploit demonstrates a heap buffer overflow in strongSwan's EAP-SIM/AKA plugin due to an integer underflow in the `parse_attributes` function when processing a crafted EAP-SIM message with a zero-length attribute. The PoC triggers a heap-buffer-overflow WRITE under ASan or a SIGSEGV in production environments.
Description
strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow
Exploits (1)
This exploit demonstrates a heap buffer overflow in strongSwan's EAP-SIM/AKA plugin due to an integer underflow in the `parse_attributes` function when processing a crafted EAP-SIM message with a zero-length attribute. The PoC triggers a heap-buffer-overflow WRITE under ASan or a SIGSEGV in production environments.