CVE-2026-114562

Name of the Vulnerable Software and Affected Versions OriginLab Origin Viewer (affected versions not specified)

Description Remote attackers can execute arbitrary code on affected installations when a user visits a malicious page or opens a malicious file. The issue occurs during the parsing of OGWU files due to insufficient validation of user-supplied data, leading to an out-of-bounds write before the start of an allocated data structure. This allows the attacker to execute code within the context of the current process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.