CVE-2026-18294
Received Received - Intake

Memory Corruption in OriginLab Origin Viewer

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: Zero Day Initiative

Description
OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OGW files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-29338.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-18294
EUVD
EUVD-2026-63443

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
originlab origin_viewer *
originlab origin_viewer From 10.4.0.25 (inc)
originlab origin_viewer to 9.9.5 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-18294 is a memory corruption vulnerability in OriginLab Origin Viewer that occurs during the parsing of OGW files. It allows remote attackers to execute arbitrary code on affected systems if a user opens a malicious file or visits a malicious page. The flaw stems from improper validation of user-supplied data during file parsing.

Detection Guidance

Detecting this vulnerability requires checking for vulnerable versions of OriginLab Origin Viewer. Inspect installed software versions and compare them against version 10.4.0.25 or later. Look for suspicious OGW files or unusual memory corruption errors during file parsing.

Impact Analysis

This vulnerability can lead to arbitrary code execution on your system, potentially allowing attackers to take control of your computer. It requires user interaction, such as opening a malicious file or visiting a compromised webpage. Successful exploitation could result in data theft, system damage, or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate GDPR or HIPAA requirements for data protection and confidentiality. Organizations affected by this flaw may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Immediately update OriginLab Origin Viewer to version 10.4.0.25 or later. Avoid opening OGW files from untrusted sources. Monitor system behavior for signs of exploitation, such as unexpected crashes or code execution.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-18294. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart