ZDI-26-586: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability

Published Aug 24, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-19886.

Affected Software

1 affected component

OriginLab Origin Viewer

Event History

Aug 24, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What does an attacker need to do to exploit this issue?

An attacker must persuade the target to visit a malicious page or open a malicious file. Successful exploitation can result in arbitrary code execution on the affected OriginLab Origin Viewer installation.

Which component is implicated in this vulnerability?

The issue is in OGM file parsing in OriginLab Origin Viewer. The provided information does not identify affected versions, fixed versions, or any workaround.

ZDI-26-586: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to do to exploit this issue?

Which component is implicated in this vulnerability?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to do to exploit this issue?

Which component is implicated in this vulnerability?