ZDI-CAN-29336: ZDI-26-552: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Aug 11, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18293.

Affected Software

1 affected component

OriginLab Origin Viewer

Event History

Aug 11, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-29336?

The severity of ZDI-CAN-29336 is rated at 7.8 on the CVSS scale.

How do I fix ZDI-CAN-29336?

To fix ZDI-CAN-29336, update to the latest version of OriginLab Origin Viewer that addresses this vulnerability.

What kind of attack does ZDI-CAN-29336 enable?

ZDI-CAN-29336 enables remote code execution through out-of-bounds write vulnerabilities.

Is user interaction required to exploit ZDI-CAN-29336?

Yes, user interaction is required as the target must either visit a malicious page or open a malicious OPJ file.

Which software is affected by ZDI-CAN-29336?

ZDI-CAN-29336 affects OriginLab Origin Viewer.