Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-115046. PoCs published by n30m1nd.
AI-analyzed exploit summary This PoC exploits a memory corruption vulnerability in CherryTree by generating a malformed .ctd file with an excessively long link attribute, causing a crash when hovered over. The issue stems from a null pointer reference in libcairo2.0.dll during bitmap rendering.
Description
CherryTree 0.36.9 - Memory Corruption (PoC)
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by n30m1nd · pythondoswindows
https://www.exploit-db.com/exploits/40638
This PoC exploits a memory corruption vulnerability in CherryTree by generating a malformed .ctd file with an excessively long link attribute, causing a crash when hovered over. The issue stems from a null pointer reference in libcairo2.0.dll during bitmap rendering.
Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target:
CherryTree prior to 0.37.6
No auth needed
Prerequisites:
Victim must open the malformed .ctd file and hover over the link
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026