Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-103049. PoCs published by infamous41md.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the BMP parsing functionality of the 'xv' image viewer. It crafts a malicious BMP file with embedded shellcode to achieve remote code execution via a bind shell on port 7000.
Description
XV 3.x - '.BMP' Parsing Local Buffer Overflow
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by infamous41md · clocallinux
https://www.exploit-db.com/exploits/405
This exploit targets a buffer overflow vulnerability in the BMP parsing functionality of the 'xv' image viewer. It crafts a malicious BMP file with embedded shellcode to achieve remote code execution via a bind shell on port 7000.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
xv (version not specified)
No auth needed
Prerequisites:
Victim must open the malicious BMP file with xv
devstral-2 · analyzed Feb 16, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026