OriginLab Origin Viewer OPJ Parsing RCE (CVE-2026-114560)
ZDI assigns CVSS 7.8 to out-of-bounds write in OPJ parser; remote code execution requires opening malicious file.
ZDI assigns CVSS 7.8 to out-of-bounds write in OPJ parser; remote code execution requires opening malicious file.
ZDI-26-879 reports out-of-bounds write in OGWU file parsing enabling remote code execution in Origin Viewer after user interaction.
ZDI assigns CVSS 7.8 to heap-based buffer overflow in OGWU parser; remote code execution requires opening malicious file.
ZDI assigns CVSS 7.8 to out-of-bounds write in OGG parser; remote code execution requires opening malicious file.
Origin Viewer OGWU file parsing allows remote code execution with user interaction required (CVE-2026-114563).
ZDI-26-883 describes a memory corruption in Origin Viewer allowing arbitrary code execution upon opening a malicious file.
ZDI-26-884 reports an out-of-bounds write in Origin Viewer that can lead to arbitrary code execution upon opening a malicious file.
Origin Viewer OPJ file parsing allows remote code execution with user interaction required (CVE-2026-114568).
ZDI-26-881 reports out-of-bounds write in OGG file parsing enabling remote code execution in Origin Viewer after user interaction.
ZDI-26-886 reports out-of-bounds write in OPJU file parsing enabling remote code execution in Origin Viewer after user interaction.
ZDI-26-882 reports out-of-bounds write in OGG file parsing enabling remote code execution in Origin Viewer after user interaction.
ZDI assigns CVSS 7.8 to out-of-bounds write in OPJU parser; remote code execution requires opening malicious file.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views