Stack-based Buffer Overflow in OriginLab Origin Viewer
CVE-2026-114563

7.8HIGH

Key Information:

Vendor

Originlab

Status
Origin Viewer
Vendor
CVE Published:
12 November 2026

What is CVE-2026-114563?

A stack-based buffer overflow vulnerability exists in OriginLab Origin Viewer due to improper validation of OGWU file data length. This flaw enables remote attackers to execute arbitrary code on vulnerable installations, necessitating user interaction to exploit. Users must either open a malicious OGWU file or visit a malicious page for the attack to succeed. Proper security measures should be taken to mitigate potential risks.

Affected Version(s)

Origin Viewer 9.9.5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-880/
x_research-advisory
https://docs.originlab.com/cve/CVE-2026-114563
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.