diff --git a/tests/lib/Utf8Tools.spec.js b/tests/lib/Utf8Tools.spec.js
index <HASH>..<HASH> 100644
--- a/tests/lib/Utf8Tools.spec.js
+++ b/tests/lib/Utf8Tools.spec.js
@@ -41,6 +41,11 @@ describe('Utf8Tools', function() {
                 isValid: false,
                 decoded: '48656c6c6f0020576f726c6421',
             },
+            {
+                data: new Uint8Array(Nimiq.BufferUtils.fromBase64('AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAASoAAAA=')),
+                isValid: false,
+                decoded: '0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000012a000000',
+            },
         ];
 
         for (const vector of vectors) {
Add Philipp's exploit as test vector