Originlab
Monthly
Remote code execution is possible in OriginLab Origin Viewer through a memory corruption flaw triggered during OGW file parsing. An attacker can exploit this by enticing a target user to open a maliciously crafted OGW file or visit a page that delivers one, executing arbitrary code in the context of the current user process. No public exploit or CISA KEV listing has been identified at time of analysis, but the vulnerability was discovered and reported by Zero Day Initiative (ZDI-CAN-29338), indicating structured third-party research.
Remote code execution in OriginLab Origin Viewer 9.9.5 is achievable by tricking a user into opening a specially crafted OPJ project file, triggering an out-of-bounds write in the file parser that corrupts memory and redirects execution to attacker-controlled code. The vulnerability was discovered and reported by Zero Day Initiative (ZDI-CAN-29336) and carries a CVSS 7.8 score with full confidentiality, integrity, and availability impact scoped to the user process. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Remote code execution in OriginLab OriginPro allows attackers to execute arbitrary code within the victim's process context by supplying a crafted OGG file. The root cause is a CWE-119 memory corruption condition in the OGG file parser, where user-supplied data is not properly validated before use, enabling a buffer overflow. Exploitation requires user interaction - the victim must open a malicious file or visit a page that triggers OriginPro's parser - and no public exploit or CISA KEV listing has been identified at time of analysis.
Remote code execution in OriginLab OriginPro 2026 SR1 is triggered when a victim opens a specially crafted OGW workspace file, exploiting a memory corruption flaw in the file parser. The vulnerability, reported by Zero Day Initiative (ZDI-26-550/ZDI-CAN-29334), allows an attacker to execute arbitrary code in the context of the current user process without requiring any privileges on the target system. No active exploitation has been confirmed in CISA KEV at time of analysis, and EPSS data was not provided, but the ZDI public advisory and vendor CVE page are both live.
Out-of-bounds write in OriginPro's OGG file parsing component enables arbitrary code execution in the context of the current user's process when a crafted OGG file is opened. Affected installations include OriginPro 2026 SR1, as confirmed by ZDI (ZDI-CAN-29333 / ZDI-26-549) and EUVD-2026-63438. No active exploitation (CISA KEV) or public exploit code has been identified at time of analysis, though user interaction is the sole barrier to exploitation once a malicious file is delivered.
Out-of-bounds write in OriginPro's OPJ project file parser enables remote attackers to execute arbitrary code when a user opens a specially crafted OPJ file. The flaw, disclosed by Zero Day Initiative as ZDI-CAN-29332, results from insufficient validation of user-supplied data during file parsing - allowing a write past the end of an allocated data structure and full compromise of the target process. No public exploit code and no active exploitation (CISA KEV) has been identified at time of analysis, but ZDI coordinated disclosure typically reduces the time-to-exploit development once advisories publish.
Remote code execution is achievable in OriginLab OriginPro through a maliciously crafted OPJU project file, exploiting an out-of-bounds write (CWE-787) in the application's file parser. OriginPro 2026 SR1 is confirmed affected per EUVD-2026-63436, with the CPE string suggesting broader version coverage may apply. No public exploit code has been identified at time of analysis and the vulnerability is absent from CISA KEV; however, ZDI discovery (ZDI-CAN-29331) indicates coordinated research disclosure, and the low attack complexity once the file is delivered makes this a meaningful risk to research and scientific computing environments.
Remote code execution is possible in OriginLab Origin Viewer through a memory corruption flaw triggered during OGW file parsing. An attacker can exploit this by enticing a target user to open a maliciously crafted OGW file or visit a page that delivers one, executing arbitrary code in the context of the current user process. No public exploit or CISA KEV listing has been identified at time of analysis, but the vulnerability was discovered and reported by Zero Day Initiative (ZDI-CAN-29338), indicating structured third-party research.
Remote code execution in OriginLab Origin Viewer 9.9.5 is achievable by tricking a user into opening a specially crafted OPJ project file, triggering an out-of-bounds write in the file parser that corrupts memory and redirects execution to attacker-controlled code. The vulnerability was discovered and reported by Zero Day Initiative (ZDI-CAN-29336) and carries a CVSS 7.8 score with full confidentiality, integrity, and availability impact scoped to the user process. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Remote code execution in OriginLab OriginPro allows attackers to execute arbitrary code within the victim's process context by supplying a crafted OGG file. The root cause is a CWE-119 memory corruption condition in the OGG file parser, where user-supplied data is not properly validated before use, enabling a buffer overflow. Exploitation requires user interaction - the victim must open a malicious file or visit a page that triggers OriginPro's parser - and no public exploit or CISA KEV listing has been identified at time of analysis.
Remote code execution in OriginLab OriginPro 2026 SR1 is triggered when a victim opens a specially crafted OGW workspace file, exploiting a memory corruption flaw in the file parser. The vulnerability, reported by Zero Day Initiative (ZDI-26-550/ZDI-CAN-29334), allows an attacker to execute arbitrary code in the context of the current user process without requiring any privileges on the target system. No active exploitation has been confirmed in CISA KEV at time of analysis, and EPSS data was not provided, but the ZDI public advisory and vendor CVE page are both live.
Out-of-bounds write in OriginPro's OGG file parsing component enables arbitrary code execution in the context of the current user's process when a crafted OGG file is opened. Affected installations include OriginPro 2026 SR1, as confirmed by ZDI (ZDI-CAN-29333 / ZDI-26-549) and EUVD-2026-63438. No active exploitation (CISA KEV) or public exploit code has been identified at time of analysis, though user interaction is the sole barrier to exploitation once a malicious file is delivered.
Out-of-bounds write in OriginPro's OPJ project file parser enables remote attackers to execute arbitrary code when a user opens a specially crafted OPJ file. The flaw, disclosed by Zero Day Initiative as ZDI-CAN-29332, results from insufficient validation of user-supplied data during file parsing - allowing a write past the end of an allocated data structure and full compromise of the target process. No public exploit code and no active exploitation (CISA KEV) has been identified at time of analysis, but ZDI coordinated disclosure typically reduces the time-to-exploit development once advisories publish.
Remote code execution is achievable in OriginLab OriginPro through a maliciously crafted OPJU project file, exploiting an out-of-bounds write (CWE-787) in the application's file parser. OriginPro 2026 SR1 is confirmed affected per EUVD-2026-63436, with the CPE string suggesting broader version coverage may apply. No public exploit code has been identified at time of analysis and the vulnerability is absent from CISA KEV; however, ZDI discovery (ZDI-CAN-29331) indicates coordinated research disclosure, and the low attack complexity once the file is delivered makes this a meaningful risk to research and scientific computing environments.