EIP-2026-101298

This exploit targets a buffer overflow (CVE-2026-143957) in the HiSilicon DVR web service (Sofia binary) to achieve remote code execution as root. It combines a stack-based overflow with a path traversal vulnerability to leak memory addresses and defeat ASLR.