EIP-2026-119553

PRE-CVE

R 3.4.4 - Local Buffer Overflow (DEP Bypass)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-119553. PoCs published by Hashim Jawad.

AI-analyzed exploit summary This exploit demonstrates a local buffer overflow in R v3.4.4 on Windows, bypassing DEP via ROP chains and executing a shell_bind_tcp payload. The payload is crafted to overflow the 'Language for menus and messages' field in GUI preferences.

Description

R 3.4.4 - Local Buffer Overflow (DEP Bypass)

Exploits (1)

exploitdb WORKING POC
by Hashim Jawad · pythonlocalwindows_x86
https://www.exploit-db.com/exploits/44680

This exploit demonstrates a local buffer overflow in R v3.4.4 on Windows, bypassing DEP via ROP chains and executing a shell_bind_tcp payload. The payload is crafted to overflow the 'Language for menus and messages' field in GUI preferences.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: R v3.4.4
No auth needed
Prerequisites: Local access to the target system · R v3.4.4 installed on Windows 7 SP1 (x86)
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026