OriginLab Origin Viewer OPJU Parsing RCE (CVE-2026-114561)
ZDI assigns CVSS 7.8 to out-of-bounds write in OPJU parser; remote code execution requires opening malicious file.
ZDI assigns CVSS 7.8 to out-of-bounds write in OPJU parser; remote code execution requires opening malicious file.
ZDI-26-879 reports out-of-bounds write in OGWU file parsing enabling remote code execution in Origin Viewer after user interaction.
ZDI assigns CVSS 7.8 to heap-based buffer overflow in OGWU parser; remote code execution requires opening malicious file.
ZDI assigns CVSS 7.8 to out-of-bounds write in OGG parser; remote code execution requires opening malicious file.
Origin Viewer OGWU file parsing allows remote code execution with user interaction required (CVE-2026-114563).
ZDI-26-882 reports out-of-bounds write in OGG file parsing enabling remote code execution in Origin Viewer after user interaction.
ZDI assigns CVSS 7.8 to out-of-bounds write in OPJ parser; remote code execution requires opening malicious file.
ZDI-26-883 describes a memory corruption in Origin Viewer allowing arbitrary code execution upon opening a malicious file.
ZDI-26-884 reports an out-of-bounds write in Origin Viewer that can lead to arbitrary code execution upon opening a malicious file.
Origin Viewer OPJ file parsing allows remote code execution with user interaction required (CVE-2026-114568).
ZDI-26-881 reports out-of-bounds write in OGG file parsing enabling remote code execution in Origin Viewer after user interaction.
ZDI-26-886 reports out-of-bounds write in OPJU file parsing enabling remote code execution in Origin Viewer after user interaction.
ZDI advisory ZDI-26-586 reports a memory corruption RCE (CVE-2026-19886, CVSS 7.8) in OriginLab Origin Viewer OGM file parsing, needing user interaction.
ZDI reported an out-of-bounds write in OriginLab Origin Viewer's OGWU parsing (CVE-2026-19885) that allows remote code execution via crafted files.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views