EIP-2026-100044

This PoC exploits a heap-based buffer overflow in Samsung's 'otp_server' service by sending a maliciously crafted parcel with an invalid length field, causing a crash. The vulnerability arises from unvalidated input in the binder service, allowing arbitrary data to be copied into a heap buffer.