Integer Underflow in JusticeRage Manalyze PE Parser
CVE-2026-95958

4.8MEDIUM

Key Information:

Vendor

Justicerage

Status
Manalyze
Vendor
CVE Published:
23 September 2026

What is CVE-2026-95958?

A security flaw has been identified in JusticeRage Manalyze due to an integer underflow in the PE Parser's function PE::_parse_relocations. By manipulating the argument BlockSize, attackers can exploit this vulnerability through a local attack vector. It is crucial for users to apply the patch available at the specified commit to mitigate the risk associated with this issue.

Affected Version(s)

Manalyze 1.0.0

References

https://vuldb.com/vuln/408568
vdb-entrytechnical-description
https://vuldb.com/vuln/408568/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-95958
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

akbarov (VulDB User)
.