EIP-2026-100041

PRE-CVE

LG MRA58K - Missing Bounds-Checking in AVI Stream Parsing

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-100041. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit demonstrates a missing bounds-checking vulnerability in AVI stream parsing, allowing an attacker to write metadata past the end of a buffer by constructing a file with more stream headers than expected. This can lead to a free of an attacker-controlled pointer, resulting in a crash or potential code execution.

Description

LG MRA58K - Missing Bounds-Checking in AVI Stream Parsing

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · textdosandroid
https://www.exploit-db.com/exploits/42170

This exploit demonstrates a missing bounds-checking vulnerability in AVI stream parsing, allowing an attacker to write metadata past the end of a buffer by constructing a file with more stream headers than expected. This can lead to a free of an attacker-controlled pointer, resulting in a crash or potential code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: CAVIFileParser (liblg_parser_avi.so)
No auth needed
Prerequisites: A maliciously crafted AVI file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026