Threats affecting pkg:github/justicerage/Manalyze

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch is named c372b6bbca9d8c63812be50596fefa4a79c65fd0. It is recommended to apply a patch to fix this issue.

CVE-2026-94090 is an integer underflow vulnerability in JusticeRage Manalyze version 1.0.0. It occurs in the PE::_parse_debug function within the PE Parser component, specifically in the file manape/pe.cpp. The flaw is triggered by manipulation of the misc.Length argument. The vulnerability can be exploited remotely. A patch identified by commit 3e299685759f4f767088871de58c5d07f98ee382 is available to fix this issue.