EIP-2026-118895

This is a technical writeup describing a heap-based buffer overflow vulnerability in Microsoft Windows' winhlp32.exe when processing malformed .hlp files. The vulnerability allows remote code execution in the context of the user opening the malicious file.