Remote Code Execution in OriginLab Origin Viewer (CVE‑2026‑114564) via OGG File Parsing
What It Is — The Zero Day Initiative advisory (ZDI‑26‑881) reports a remote code execution (RCE) flaw in OriginLab Origin Viewer. The vulnerability (CVE‑2026‑114564) stems from an out‑of‑bounds write when parsing malicious OGG audio files. An attacker who convinces a user to open a crafted file or visit a malicious page can execute arbitrary code in the context of the Origin Viewer process. The CVSS base score is 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). OriginLab has released a patch; users are urged to upgrade immediately.
Affected Products — OriginLab Origin Viewer (all versions prior to the November 2026 security update).
Why It Matters for Trust & Control Assurance — This issue tests the “secure software lifecycle” control objective—specifically, timely vulnerability remediation and evidence of patch deployment. Verisq’s Control Mapping capability helps map this patch‑management activity to multiple frameworks in a single audit view.
Recommended Actions —
- Deploy OriginLab’s November 2026 update to all Origin Viewer installations.
- Verify patch status through automated asset inventory and configuration management tools.
- Monitor process‑creation and file‑access logs for signs of OGG‑file exploitation.
- Document remediation steps as evidence for audit readiness.
Source: Zero Day Initiative Advisory