Stack-based Buffer Overflow in OriginLab Origin Viewer (CVE‑2026‑114563) Enables Remote Code Execution
What It Is — The Zero Day Initiative advisory (ZDI‑26‑880) details a stack‑based buffer overflow in the OGWU file parser of OriginLab Origin Viewer. An attacker who convinces a user to open a crafted OGWU file (or load a malicious page that triggers the parser) can overflow the buffer, overwrite the return address, and execute arbitrary code with the privileges of the viewer process. The vulnerability is rated CVSS 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). OriginLab released a patch on the same day as the advisory; no public exploits have been observed.
Affected Products — OriginLab Origin Viewer (all versions prior to the November 2026 security update).
Why It Matters for Trust & Control Assurance — This flaw tests the control objective of vulnerability management and timely patching; demonstrating that you can detect, assess, and remediate such flaws is a key trust signal across many frameworks.
Recommended Actions —
- Deploy OriginLab’s November 2026 update to all Origin Viewer installations.
- Verify the installed version via inventory tools and record the remediation in your change‑management system.
- Update your vulnerability‑management process to include file‑parser libraries as a monitoring scope.
Source: Zero Day Initiative advisory