EIP-2026-118071

PRE-CVE

VLC media player 2.2.8 - Arbitrary Code Execution (PoC)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118071. PoCs published by Eugene Ng.

AI-analyzed exploit summary This is a functional proof-of-concept exploit for CVE-2018-11529, targeting a Use-After-Free vulnerability in VLC media player 2.2.8. It generates a malicious MKV file that triggers arbitrary code execution via crafted ROP chains and shellcode.

Description

VLC media player 2.2.8 - Arbitrary Code Execution (PoC)

Exploits (1)

exploitdb WORKING POC

by Eugene Ng · pythonlocalwindows

https://www.exploit-db.com/exploits/44979

View Code ZIP pw:eip

This is a functional proof-of-concept exploit for CVE-2018-11529, targeting a Use-After-Free vulnerability in VLC media player 2.2.8. It generates a malicious MKV file that triggers arbitrary code execution via crafted ROP chains and shellcode.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: VLC media player 2.2.8

No auth needed

Prerequisites: VLC media player 2.2.8 installed on Windows · Ability to deliver a crafted MKV file to the target

MITRE ATT&CK

T1203 - Exploitation for Client Execution T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026