CVE-2026-35330

strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow

STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2026-35330. PoCs published by Lukas Johannes Moeller, JohannesLks.

AI-analyzed exploit summary This exploit demonstrates a heap buffer overflow in strongSwan's EAP-SIM/AKA plugin due to an integer underflow in the `parse_attributes` function when processing a crafted EAP-SIM message with a zero-length attribute. The PoC triggers a heap-buffer-overflow WRITE under ASan or a SIGSEGV in production environments.

Description

strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow

Exploits (2)

exploitdb WORKING POC
by Lukas Johannes Moeller · cremotemultiple
https://www.exploit-db.com/exploits/52587

This exploit demonstrates a heap buffer overflow in strongSwan's EAP-SIM/AKA plugin due to an integer underflow in the `parse_attributes` function when processing a crafted EAP-SIM message with a zero-length attribute. The PoC triggers a heap-buffer-overflow WRITE under ASan or a SIGSEGV in production environments.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: strongSwan <= 5.9.13 (with eap-sim or eap-aka plugin built)
No auth needed
Prerequisites: strongSwan with EAP-SIM/AKA plugin enabled · network access to target
mistral-large-3 · analyzed May 30, 2026 Full analysis →
nomisec WORKING POC
by JohannesLks · poc
https://github.com/JohannesLks/CVE-2026-35330

The repository contains a functional exploit PoC for CVE-2026-35330, demonstrating a heap buffer overflow in strongSwan's EAP-SIM/AKA attribute parser via an integer underflow. The PoC links against installed strongSwan libraries and triggers the vulnerability by crafting a malicious EAP-SIM payload with an AT_RAND attribute of length 0.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: strongSwan <= 5.9.13
No auth needed
Prerequisites: installed strongSwan libraries (libsimaka.so, libstrongswan.so) · development headers for strongSwan
mistral-large-3 · analyzed May 31, 2026 Full analysis →

Details

Status draft
Tracked Since May 30, 2026