CVE-2026-18293
Received Received - Intake

OriginLab Origin Viewer OPJ File Parsing Out-of-Bounds Write

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: Zero Day Initiative

Description
OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OPJ files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29336.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-18293
EUVD
EUVD-2026-63442

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
originlab origin_viewer *
originlab origin_viewer to 10.4.0.25 (exc)
originlab origin_viewer From 10.4.0.25 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-18293 is a high-severity vulnerability in OriginLab Origin Viewer that allows remote attackers to execute arbitrary code. The flaw occurs during the parsing of OPJ files due to improper validation of user-supplied data, leading to an out-of-bounds write. Exploitation requires user interaction, such as opening a malicious OPJ file.

Detection Guidance

This vulnerability involves out-of-bounds write during OPJ file parsing in OriginLab Origin Viewer. Detection primarily relies on monitoring for suspicious file parsing activities or known malicious OPJ files rather than specific commands. Check for unusual processes spawned by Origin Viewer or unexpected network connections after opening OPJ files. Ensure Origin Viewer is updated to version 10.4.0.25 or later to avoid exposure.

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code on your system with the same privileges as the current user. This could lead to data theft, system compromise, or further malicious activities. Users are advised to update to the latest version and avoid opening files from untrusted sources.

Compliance Impact

This vulnerability could lead to arbitrary code execution, potentially allowing unauthorized access to sensitive data processed by Origin Viewer. This may violate compliance requirements under GDPR (data protection) and HIPAA (health information security) by enabling data breaches or unauthorized modifications to protected data.

Mitigation Strategies

Immediately update OriginLab Origin Viewer to version 10.4.0.25 or later to patch the vulnerability. Avoid opening OPJ files from untrusted sources or suspicious emails. Implement application allowlisting to restrict execution of Origin Viewer to trusted paths only. Monitor network traffic and system logs for signs of exploitation attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18293. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart