CVE-2026-94090: Integer Underflow in JusticeRage Manalyze
CVE-2026-94090 is an integer underflow vulnerability in JusticeRage Manalyze version 1.0.0. The flaw exists in the PE::_parse_debug function within the PE Parser component, where manipulation of the misc.Length argument can cause an integer underflow. This vulnerability can be exploited remotely. A patch identified by commit 3e299685759f4f767088871de58c5d07f98ee382 is available to fix the issue.
AI Analysis
Technical Summary
JusticeRage Manalyze 1.0.0 contains an integer underflow vulnerability in the PE::_parse_debug function of the PE Parser component (file manape/pe.cpp). The vulnerability arises from improper handling of the misc.Length argument, which can be manipulated to cause an integer underflow. This flaw can be exploited remotely to potentially affect the program's behavior. A patch has been made available to remediate this issue.
Potential Impact
The integer underflow may lead to incorrect processing of PE debug information, potentially causing unexpected behavior or crashes. The vulnerability is remotely exploitable without privileges or user interaction, but the overall impact is rated medium with low confidentiality, integrity, and availability impacts.
Mitigation Recommendations
A patch identified by commit 3e299685759f4f767088871de58c5d07f98ee382 is available and should be applied to JusticeRage Manalyze 1.0.0 to remediate this vulnerability.
CVE-2026-94090: Integer Underflow in JusticeRage Manalyze
Description
CVE-2026-94090 is an integer underflow vulnerability in JusticeRage Manalyze version 1.0.0. The flaw exists in the PE::_parse_debug function within the PE Parser component, where manipulation of the misc.Length argument can cause an integer underflow. This vulnerability can be exploited remotely. A patch identified by commit 3e299685759f4f767088871de58c5d07f98ee382 is available to fix the issue.
CVSS v4.0
Score 5.3medium
Affected software
JusticeRage
Manalyze
pkg:github/justicerage/Manalyzecpe:2.3:a:justicerage:manalyze:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
JusticeRage Manalyze 1.0.0 contains an integer underflow vulnerability in the PE::_parse_debug function of the PE Parser component (file manape/pe.cpp). The vulnerability arises from improper handling of the misc.Length argument, which can be manipulated to cause an integer underflow. This flaw can be exploited remotely to potentially affect the program's behavior. A patch has been made available to remediate this issue.
Potential Impact
The integer underflow may lead to incorrect processing of PE debug information, potentially causing unexpected behavior or crashes. The vulnerability is remotely exploitable without privileges or user interaction, but the overall impact is rated medium with low confidentiality, integrity, and availability impacts.
Mitigation Recommendations
A patch identified by commit 3e299685759f4f767088871de58c5d07f98ee382 is available and should be applied to JusticeRage Manalyze 1.0.0 to remediate this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-20T08:07:29.403Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ab05b6055bf5e2cf59a869e
Added to database: 09/20/2026, 22:17:04 UTC
Last enriched: 09/20/2026, 22:31:29 UTC
Last updated: 09/20/2026, 22:51:29 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.