EIP-2026-103725

This exploit demonstrates a heap-based out-of-bounds read vulnerability in Wireshark's AirPDcap module, triggered by a malformed file processed by tshark. The crash occurs due to an overflow in memcpy during WPA broadcast key decryption, leading to a denial-of-service condition.