ZDI-26-551: OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro . User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18292.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-26-551?
The severity of ZDI-26-551 is rated at 7.8 according to the CVSS scoring system.
How do I fix ZDI-26-551?
To fix ZDI-26-551, users should update to the latest version of OriginLab OriginPro that addresses this vulnerability.
What type of vulnerability is ZDI-26-551?
ZDI-26-551 is a memory corruption vulnerability that can lead to remote code execution.
What kind of user interaction is required to exploit ZDI-26-551?
Exploitation of ZDI-26-551 requires the user to either visit a malicious webpage or open a malicious file.
Which software is affected by ZDI-26-551?
ZDI-26-551 affects installations of OriginLab OriginPro.