Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

OriginLab Origin Viewer OGM File Parsing Vulnerability Allows RCE

Original title: ZDI-26-883: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability

ZDI Published Advisories ()
Read at zerodayinitiative.com
Part of a story covered by 12 sourcesZDI Reports Multiple RCE Vulnerabilities in Origin Viewer File ParsersMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

ZDI-26-883 describes a memory corruption in Origin Viewer allowing arbitrary code execution upon opening a malicious file.

OriginLab Origin Viewer has a memory corruption vulnerability when parsing OGM files. The ZDI assigned a CVSS rating of 7.8. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Key facts
  • CVSS rating of 7.8
  • CVE-2026-114566
  • Requires user interaction
  • Affects OriginLab Origin Viewer
Security assessment · AI, from the articleNo known exploitation
Analyze CVE-2026-114566 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-114566
Tags
originlaborigin-viewerrcezdi
Vendors
OriginLab
Products
Origin Viewer

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-114566
———

From the original article

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.

ZDI Published Advisories

zerodayinitiative.com

Read the full article at ZDI Published Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.