CVE-2026-94090

Received Received - Intake

Integer Underflow in Manalyze PE Parser

Publication date: 2026-09-20

Last updated on: 2026-09-20

Assigner: VulDB

Description

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patch is identified as 3e299685759f4f767088871de58c5d07f98ee382. A patch should be applied to remediate this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-20

Last Modified

2026-09-20

Generated

2026-09-21

AI Q&A

2026-09-21

EPSS Evaluated

N/A

NVD

CVE-2026-94090

EUVD

EUVD-2026-83794

Affected Vendors & Products

Vendor	Product	Version / Range
justicerage	manalyze	to 1.0.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-191	The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
CWE-189

Attack-Flow Graph

Executive Summary

This vulnerability is an integer underflow flaw in JusticeRage Manalyze 1.0.0, specifically in the PE::_parse_debug function of the PE Parser component. It occurs when the misc.Length argument is manipulated, potentially allowing remote attacks.

Detection Guidance

This vulnerability involves an integer underflow in the PE::_parse_debug function of JusticeRage Manalyze 1.0.0. Detection requires checking for the vulnerable version of Manalyze and analyzing PE files for malformed debug data. No specific commands are provided in the context.

Impact Analysis

The vulnerability may allow remote attackers to execute arbitrary code or cause denial-of-service conditions by exploiting the integer underflow in the PE Parser. This could lead to unauthorized access or system crashes.

Compliance Impact

The vulnerability involves an integer underflow in JusticeRage Manalyze 1.0.0, which could allow remote attacks. This may lead to unauthorized data access or manipulation, potentially violating GDPR (data confidentiality) and HIPAA (protected health information integrity). However, specific compliance impacts depend on system configuration and data processed.

Mitigation Strategies

Apply the patch identified as 3e299685759f4f767088871de58c5d07f98ee382 to JusticeRage Manalyze 1.0.0 to remediate the integer underflow vulnerability in PE::_parse_debug.

Hi! I’m here to help you understand CVE-2026-94090. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70