EIP-2026-119251

PRE-CVE

VideoCharge Studio - 'CHTTPResponse::GetHttpResponse()' Remote Stack Buffer Overflow

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119251. PoCs published by Julien Ahrens.

AI-analyzed exploit summary This exploit demonstrates a remote stack-based buffer overflow in VideoCharge Studio v2.12.3.685 via a crafted HTTP response, bypassing SafeSEH, ASLR, and DEP using ROP techniques to achieve arbitrary code execution.

Description

VideoCharge Studio - 'CHTTPResponse::GetHttpResponse()' Remote Stack Buffer Overflow

Exploits (1)

exploitdb WORKING POC VERIFIED

by Julien Ahrens · pythonremotewindows

https://www.exploit-db.com/exploits/39105

View Code ZIP pw:eip

This exploit demonstrates a remote stack-based buffer overflow in VideoCharge Studio v2.12.3.685 via a crafted HTTP response, bypassing SafeSEH, ASLR, and DEP using ROP techniques to achieve arbitrary code execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Complex

Reliability

Reliable

Target: VideoCharge Studio v2.12.3.685

No auth needed

Prerequisites: MITM position to spoof DNS for www.videocharge.com · Target application must initiate HTTP request to attacker-controlled server

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026