Out-Of-Bounds Write Vulnerability in OriginLab Origin Viewer
CVE-2026-114564

7.8HIGH

Key Information:

Vendor

Originlab

Status
Origin Viewer
Vendor
CVE Published:
12 November 2026

What is CVE-2026-114564?

The OriginLab Origin Viewer contains a vulnerability in its OGG file parsing mechanism. This flaw arises from inadequate validation of user-supplied data, leading to an out-of-bounds write condition. Attackers can exploit this vulnerability by persuading users to visit a malicious webpage or open a crafted OGG file. Successfully executing this attack could allow the intruder to run arbitrary code in the context of the current process, compromising the system's integrity.

Affected Version(s)

Origin Viewer 9.9.5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-881/
x_research-advisory
https://docs.originlab.com/cve/CVE-2026-114564
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.