EIP-2026-115148

PRE-CVE

Disk Sorter 9.7.14 - 'Input Directory' Local Buffer Overflow (PoC)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-115148. PoCs published by n3ckD_.

AI-analyzed exploit summary This exploit demonstrates a local buffer overflow in DiskSorter v9.7.14 by generating a malicious input file (poc.txt) that triggers a crash when pasted into the 'Add Input Directory' dialog. The PoC uses a RETN address and NOP sled to control EIP, but lacks a full payload for execution.

Description

Disk Sorter 9.7.14 - 'Input Directory' Local Buffer Overflow (PoC)

Exploits (1)

exploitdb WORKING POC VERIFIED
by n3ckD_ · pythondoswindows
https://www.exploit-db.com/exploits/42112

This exploit demonstrates a local buffer overflow in DiskSorter v9.7.14 by generating a malicious input file (poc.txt) that triggers a crash when pasted into the 'Add Input Directory' dialog. The PoC uses a RETN address and NOP sled to control EIP, but lacks a full payload for execution.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: DiskSorter v9.7.14 (32-Bit)
No auth needed
Prerequisites: DiskSorter v9.7.14 installed on Windows · User interaction to paste malicious input
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026