EIP-2026-104696

PRE-CVE

PHP 4.4.3/5.1.4 - 'objIndex' Local Buffer Overflow

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-104696. PoCs published by Heintz.

AI-analyzed exploit summary This exploit leverages a memory corruption vulnerability in PHP's sscanf function (CVE-2006-127669) by manipulating argument swapping and pointer dereferencing to achieve arbitrary code execution. It constructs a malicious zval structure and shellcode to hijack execution flow via a crafted format string.

Description

PHP 4.4.3/5.1.4 - 'objIndex' Local Buffer Overflow

Exploits (1)

exploitdb WORKING POC VERIFIED

by Heintz · phplocalphp

https://www.exploit-db.com/exploits/2152

View Code ZIP pw:eip

This exploit leverages a memory corruption vulnerability in PHP's sscanf function (CVE-2006-127669) by manipulating argument swapping and pointer dereferencing to achieve arbitrary code execution. It constructs a malicious zval structure and shellcode to hijack execution flow via a crafted format string.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Racy

Target: PHP 5.1.4 (and likely other versions)

No auth needed

Prerequisites: PHP 5.1.4 with specific memory layout · Ability to execute arbitrary PHP code

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026