Remote Code Execution in OriginLab Origin Viewer (CVE‑2026‑114565) via OGG Parsing Flaw
What It Is — OriginLab Origin Viewer contains an out‑of‑bounds write in its OGG file parser. A crafted OGG file can cause the viewer to write past the end of an allocated buffer, allowing an attacker who convinces a user to open the file (or visit a page that triggers the file load) to execute arbitrary code in the context of the viewer process. The flaw is rated CVSS 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). OriginLab has released a patch; the advisory was publicly disclosed on 6 Nov 2026 (ZDI‑26‑882).
Affected Products — OriginLab Origin Viewer (all versions prior to the 2026‑11‑06 patch).
Why It Matters for Trust & Control Assurance — The issue highlights the need for robust input‑validation and secure‑coding controls, a control objective that maps to many frameworks (e.g., NIST CSF Identify > Protect). Verisq’s Control Mapping capability can surface such gaps and provide continuous evidence of remediation.
Recommended Actions —
- Inventory all installations of Origin Viewer and verify the applied version.
- Deploy OriginLab’s 2026‑11‑06 security update immediately.
- Conduct a focused test with a crafted OGG file to confirm remediation.
- Review your secure‑development lifecycle (SDLC) policies to ensure input validation is a documented, auditable control.
Source: Zero Day Initiative Advisory