Heap-based Buffer Overflow in OriginLab Origin Viewer Allows Remote Code Execution
CVE-2026-114569

7.8HIGH

Key Information:

Vendor

Originlab

Status
Origin Viewer
Vendor
CVE Published:
12 November 2026

What is CVE-2026-114569?

The vulnerability arises from the improper validation of user-supplied data length when parsing OGWU files in OriginLab Origin Viewer. This flaw enables attackers to exploit the software by enticing users to open a malicious file or visit a compromised webpage. Successful exploitation can lead to arbitrary code execution within the context of the affected process, posing significant risks to the integrity and security of the system.

Affected Version(s)

Origin Viewer 9.9.5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-875/
x_research-advisory
https://docs.originlab.com/cve/CVE-2026-114569
vendor-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.