EIP-2026-115968

PRE-CVE

NPlayer - '.dat Skin' Local Heap Overflow (PoC)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-115968. PoCs published by Rehan Ahmed.

AI-analyzed exploit summary This Perl script generates a malicious .dat skin file for NPlayer, triggering a local heap overflow via a 5000-byte buffer of 'A' characters. The exploit targets NPlayer's skin file parsing, leading to a crash with controlled EIP (7C90EAF0 in ntdll).

Description

NPlayer - '.dat Skin' Local Heap Overflow (PoC)

Exploits (1)

exploitdb WORKING POC VERIFIED
by Rehan Ahmed · perldoswindows
https://www.exploit-db.com/exploits/11133

This Perl script generates a malicious .dat skin file for NPlayer, triggering a local heap overflow via a 5000-byte buffer of 'A' characters. The exploit targets NPlayer's skin file parsing, leading to a crash with controlled EIP (7C90EAF0 in ntdll).

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: NPlayer (version unspecified, tested on WinXP SP2)
No auth needed
Prerequisites: Local access to the target system · Ability to place a .dat file in the NPlayer skins directory
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026