EIP-2026-118185

This exploit leverages a stack-based buffer overflow in XMPlay 3.3.0.4 by crafting a malicious PLS file with an oversized filename field, followed by a JMP ESP address and shellcode to execute arbitrary code (e.g., calc.exe).