DLL and Shared Library Hijacking Vulnerability in MemProcFS by Ufrisk

CVE-2026-40031

What is CVE-2026-40031?

MemProcFS versions prior to 5.17 are susceptible to multiple unsafe library loading patterns that present significant security risks. Attackers can exploit this vulnerability by placing a malicious DLL or shared library in the application's working directory or by manipulating the LD_LIBRARY_PATH, leading to arbitrary code execution when MemProcFS loads. This exposure affects various components, including the LoadLibraryU and dlopen calls, which can be leveraged across several attack surfaces, making it imperative for users to upgrade to version 5.17 or later to mitigate these risks.

References