Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

OriginLab Origin Viewer OPJ Parsing RCE (CVE-2026-114560)

Original title: ZDI-26-877: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI Published Advisories ()
Read at zerodayinitiative.com
Part of a story covered by 12 sourcesZDI Reports Multiple RCE Vulnerabilities in Origin Viewer File ParsersMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

ZDI assigns CVSS 7.8 to out-of-bounds write in OPJ parser; remote code execution requires opening malicious file.

ZDI-26-877 discloses an out-of-bounds write vulnerability in Origin Viewer when parsing OPJ files. Attackers need only user interaction to visit a malicious page or open a crafted file. No patches or mitigations are mentioned.

Key facts
  • CVSS rating of 7.8
  • CVE-2026-114560
  • Requires user interaction
  • File parsing flaw
Security assessment · AI, from the articleNo known exploitation

Impact: arbitrary code execution

Analyze CVE-2026-114560 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-114560
Tags
originlaborigin-viewerrceoopbuffer-overflow
Vendors
OriginLab
Products
Origin Viewer

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-114560
———

From the original article

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.

ZDI Published Advisories

zerodayinitiative.com

Read the full article at ZDI Published Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.