Out-Of-Bounds Write Remote Code Execution Vulnerability in OriginLab OriginPro

CVE-2026-18290

What is CVE-2026-18290?

A vulnerability in OriginLab OriginPro allows remote attackers to exploit their victims via specially crafted OGG files. This flaw arises from inadequate validation of user-supplied data when parsing OGG files, leading to an out-of-bounds write condition. An attacker can utilize this issue to execute arbitrary code in the context of the affected process. Exploitation requires user interaction, as the target must visit a malicious page or open a specifically crafted OGG file.

References