Heap-based Buffer Overflow in OriginLab Origin Viewer
CVE-2026-114568

7.8HIGH

Key Information:

Vendor

Originlab

Status
Origin Viewer
Vendor
CVE Published:
12 November 2026

What is CVE-2026-114568?

A vulnerability in OriginLab Origin Viewer enables remote code execution due to improper validation during the parsing of OPJ files. By tricking users into opening a specially crafted file, an attacker can exploit this flaw to execute arbitrary code in the context of the application. This underlines the importance of ensuring software is kept up-to-date and exercising caution when handling files from untrusted sources.

Affected Version(s)

Origin Viewer 9.9.5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-885/
x_research-advisory
https://docs.originlab.com/cve/CVE-2026-114568
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.