EIP-2026-114688

This is a functional return-to-libc exploit targeting a buffer overflow in QNX's io-graphics via the PHOTON2_HOME environment variable. It leverages dlsym() to retrieve libc addresses and searches memory for /bin/sh to achieve local privilege escalation.