EIP-2026-100041

This exploit demonstrates a missing bounds-checking vulnerability in AVI stream parsing, allowing an attacker to write metadata past the end of a buffer by constructing a file with more stream headers than expected. This can lead to a free of an attacker-controlled pointer, resulting in a crash or potential code execution.