Out-of-Bounds-Write — PoC Archivehttps://poc.intelseclab.com/tags/out-of-bounds-write/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Dolby Unified (DDPlus) Decoder Out-of-Bounds Write via Evolution Data (CVE-2025-54957)https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-54957-dolby-decoder-oob-write/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-06_cve-2025-54957-dolby-decoder-oob-write/Critical severity (CVSS 9.8) — binary · CVE-2025-54957. Status: Weaponized. Affects: Dolby Digital Plus (DDPlus) Unified Decoder — bundled in Android media stack, iOS/macOS CoreAudio-adjacent decoders, and ChromeOS. Tags: dolby, ddplus, ac-3, ec-3, audio-codec, out-of-bounds-write, integer-overflow, zero-click, android, ios, macos, heap-corruption.binaryCriticaldolbyddplusac-3ec-3audio-codecout-of-bounds-writeinteger-overflowzero-clickandroidiosmacosheap-corruptionSamsung SveService Native Out-of-Bounds Write (CVE-2026-21018)https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-21018-samsung-sveservice-oob-write-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-21018-samsung-sveservice-oob-write-lpe/High severity — binary · CVE-2026-21018 (Samsung SVE-2026-0478, SMR May 2026). Status: PoC. Affects: Samsung SveService (com.sec.sve) system service and its libsvejni.so native library. Tags: android, samsung, binder, native, out-of-bounds-write, jni, lpe, memcpy, memset.binaryHighandroidsamsungbindernativeout-of-bounds-writejnilpememcpymemsetMarlin Firmware M421 G-code Handler Out-of-Bounds Write — CVE-2026-56111https://poc.intelseclab.com/pocs/hardware/2026-07-05_cve-2026-56111-marlin-m421-oob-write/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/hardware/2026-07-05_cve-2026-56111-marlin-m421-oob-write/High severity (CVSS 8.3) — hardware · CVE-2026-56111. Status: PoC. Affects: Marlin Firmware (3D printer firmware), builds compiled with MESH_BED_LEVELING. Tags: marlin, 3d-printer, firmware, g-code, out-of-bounds-write, mesh-bed-leveling, denial-of-service, embedded.hardwareHighmarlin3d-printerfirmwareg-codeout-of-bounds-writemesh-bed-levelingdenial-of-serviceembeddedobjdump DLX ELF Backend Out-of-Bounds Write (Crash-to-Calc)https://poc.intelseclab.com/pocs/binary/2026-07-03_objdump-dlx-elf-backend-oob/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-03_objdump-dlx-elf-backend-oob/Medium severity — binary · None assigned as of 2026-07-03. Status: PoC. Affects: GNU Binutils objdump — DLX ELF backend (elf32-dlx). Tags: binutils, objdump, elf-parsing, dlx, out-of-bounds-write, aslr-bypass, local-code-execution, crash-to-calc.binaryMediumbinutilsobjdumpelf-parsingdlxout-of-bounds-writeaslr-bypasslocal-code-executioncrash-to-calcFortinet FortiOS SSL VPN Unauthenticated RCE (CVE-2024-21762)https://poc.intelseclab.com/pocs/web/2026-05-16_fortios-sslvpn-rce-cve-2024-21762/Sat, 16 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-05-16_fortios-sslvpn-rce-cve-2024-21762/Critical severity (CVSS 9.6) — web · CVE-2024-21762. Status: Weaponized. Affects: Fortinet FortiOS SSL VPN (sslvpnd). Tags: RCE, out-of-bounds-write, SSL-VPN, FortiOS, edge-appliance, unauthenticated, KEV.webCriticalRCEout-of-bounds-writeSSL-VPNFortiOSedge-applianceunauthenticatedKEV