Origin Viewer OPJ parsing heap-based buffer overflow enables remote code execution (CVE-2026-114568)
Origin Viewer OPJ file parsing allows remote code execution with user interaction required (CVE-2026-114568).
Stories per day · 30 days
10 stories, newest first · one card per story
Stories tagged #originlab
ZDI-26-585: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI reported an out-of-bounds write in OriginLab Origin Viewer's OGWU parsing (CVE-2026-19885) that allows remote code execution via crafted files.
ZDI-26-586: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI advisory ZDI-26-586 reports a memory corruption RCE (CVE-2026-19886, CVSS 7.8) in OriginLab Origin Viewer OGM file parsing, needing user interaction.
ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI advisory ZDI-26-547 discloses CVE-2026-18288, an out-of-bounds write in OriginLab OriginPro OPJU file parsing enabling remote code execution via crafted files.
ZDI-26-550: OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI discloses a memory corruption flaw in OriginLab OriginPro OGW file parsing enabling remote code execution via malicious files (CVE-2026-18291, CVSS 7.8).
ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI discloses CVE-2026-18290, a CVSS 7.8 out-of-bounds write in OriginLab OriginPro OGG file parsing enabling remote code execution via malicious files.
ZDI-26-553: OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI discloses OriginLab Origin Viewer OGW file parsing memory corruption RCE (CVE-2026-18294, CVSS 7.8) exploitable via malicious file or page.
ZDI-26-548: OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI advisory ZDI-26-548 discloses CVE-2026-18289, an out-of-bounds write in OriginLab OriginPro OPJ parsing enabling remote code execution via malicious files.
ZDI-26-551: OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability
ZDI advisory ZDI-26-551 discloses CVE-2026-18292, memory corruption in OriginLab OriginPro OGG file parsing enabling remote code execution with user interaction.
ZDI-26-552: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI discloses CVE-2026-18293, a CVSS 7.8 out-of-bounds write in OriginLab Origin Viewer OPJ file parsing enabling remote code execution via malicious files.