EIP-2026-114962
PRE-CVEAvira - Heap Underflow Parsing PE Section Headers
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-114962. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit demonstrates a heap underflow vulnerability in Avira Antivirus's PE file parser. By crafting a malicious PE file with a section header containing a large relative virtual address, an attacker can trigger a memcpy operation that writes controlled data before the allocated heap buffer, leading to potential remote code execution as NT AUTHORITY\SYSTEM.
Description
Avira - Heap Underflow Parsing PE Section Headers
Exploits (1)
This exploit demonstrates a heap underflow vulnerability in Avira Antivirus's PE file parser. By crafting a malicious PE file with a section header containing a large relative virtual address, an attacker can trigger a memcpy operation that writes controlled data before the allocated heap buffer, leading to potential remote code execution as NT AUTHORITY\SYSTEM.