EUVD-2026-83794
GHSA-p62g-3997-c6pg
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local CLI parses an attacker-supplied file so AV:L/UI:R; underflow yields file over-read → crash/DoS (A:L) with no demonstrated memory disclosure or corruption (C:N/I:N).
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
1DescriptionCVE.org
A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patch is identified as 3e299685759f4f767088871de58c5d07f98ee382. A patch should be applied to remediate this issue.
AnalysisAI
Integer underflow in the PE parser of Manalyze 1.0.0 (PE::_parse_debug in manape/pe.cpp) can be triggered when the tool processes a crafted Portable Executable whose IMAGE_DEBUG_MISC debug-directory entry declares a Length smaller than the misc structure header, causing the computed string length to wrap to a very large unsigned value and the parser to read beyond the intended buffer. Exploitation is not remote in practice: it requires a local user (typically a malware analyst) to voluntarily run the unpatched Manalyze CLI against the malicious sample, so the assessed risk is low (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L), with impact largely confined to the parsing process - the tag 'Information Disclosure' reflects the out-of-bounds read potential rather than confirmed data exfiltration. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the target to run Manalyze (a local CLI) against an attacker-crafted PE file containing an IMAGE_DEBUG_MISC debug directory entry whose Length field is set below the misc_size structure size, triggering the underflow in PE::_parse_debug. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a low-real-risk issue despite the network-flavored framing. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the upstream fix, commit 3e299685759f4f767088871de58c5d07f98ee382 in the JusticeRage/Manalyze repository (https://github.com/JusticeRage/Manalyze/commit/3e299685759f4f767088871de58c5d07f98ee382), which replaces the unbounded string reads with bounded ASCII/UTF-16 readers and enforces correct handling of misc.Length and misc.Unicode; because this is a source-tree commit rather than a tagged release, upstream fix available (PR/commit); released patched version not independently confirmed, so rebuild Manalyze (or the embedded manape library) from a revision at or after that commit and verify the four new regression tests in test/pe.cpp pass. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-191 – Integer Underflow
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today