CVE-2026-95958: JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow
A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::parserelocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch is named c372b6bbca9d8c63812be50596fefa4a79c65fd0. It is recommended to apply a patch to fix this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
JusticeRage Manalyze PE Parserto a version that resolves this vulnerability.Patch c372b6bbca9d8c63812be50596fefa4a79c65fd0
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running JusticeRage Manalyze 1.0.0 are affected when its PE Parser processes input whose relocation BlockSize value can be manipulated. Exploitation requires local access and low privileges.
What is required to exploit the flaw?
An attacker needs a local attack path and the ability to manipulate the BlockSize argument processed by PE::_parse_relocations in manape/pe.cpp. No user interaction is required.
What is the impact of successful exploitation?
The reported impact is limited to availability: the vulnerability has no reported confidentiality or integrity impact, but may cause a low-severity availability effect through integer underflow.
What should be done if the affected version is in use?
Apply the patch identified as c372b6bbca9d8c63812be50596fefa4a79c65fd0. Until patched, restrict local access and avoid processing PE inputs from untrusted local sources where possible.