OriginLab Origin Viewer OGWU File Parsing Vulnerability Allows RCE
Original title: ZDI-26-884: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI-26-884 reports an out-of-bounds write in Origin Viewer that can lead to arbitrary code execution upon opening a malicious file.
OriginLab Origin Viewer has a remote code execution vulnerability when parsing OGWU files. The ZDI assigned a CVSS rating of 7.8. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
- CVSS rating of 7.8
- CVE-2026-114567
- Requires user interaction
- Affects OriginLab Origin Viewer
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-114567 | — | — | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.