This vulnerability in OriginLab Origin Viewer 9.9.5 involves improper restriction of operations within the bounds of a memory buffer (CWE-119) during the parsing of OGM files. The lack of proper validation of user-supplied data leads to memory corruption, which can be exploited by remote attackers to execute arbitrary code in the context of the current process. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability was tracked as ZDI-CAN-29340 and has a CVSS v3.0 score of 7.8, indicating high severity.

Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the current user, potentially leading to full compromise of the affected system. The attack requires user interaction, limiting automatic exploitation. The vulnerability affects confidentiality, integrity, and availability as indicated by the CVSS vector.

No official patch or remediation information is provided in the vendor advisory or related sources. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should avoid opening untrusted OGM files or visiting untrusted web pages that could trigger the vulnerability.