Origin Viewer OGWU parsing stack-based buffer overflow enables remote code execution (CVE-2026-114563)
Original title: ZDI-26-880: OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
Origin Viewer OGWU file parsing allows remote code execution with user interaction required (CVE-2026-114563).
The OGWU file parsing vulnerability in OriginLab Origin Viewer lets remote attackers execute arbitrary code. User interaction is needed as the target must visit a malicious page or open a malicious file. The ZDI assigned a CVSS rating of 7.8.
- User interaction required to exploit via malicious page or file.
- CVSS rating of 7.8.
Impact: remote arbitrary code execution
- CVEs
- CVE-2026-114563
- Vendors
- OriginLab
- Products
- Origin Viewer
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-114563 | — | — | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.