Memory Corruption Vulnerability in OriginLab's Origin Viewer OGM File Parsing
CVE-2026-19886

7.8HIGH

Key Information:

Vendor

Originlab

Status
Origin Viewer
Vendor
CVE Published:
15 September 2026

What is CVE-2026-19886?

A vulnerability exists in OriginLab's Origin Viewer due to improper validation of user-supplied data when parsing OGM files. This flaw could allow remote attackers to exploit the vulnerability by enticing users to visit a malicious webpage or open a compromised file, leading to potential memory corruption. Successful exploitation may enable attackers to execute arbitrary code in the context of the current user session, thereby compromising the security of the system.

Affected Version(s)

Origin Viewer 9.9.5

References

https://www.zerodayinitiative.com/advisories/ZDI-26-586/
x_research-advisory

CVSS V3.0

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.