CVE-2026-18289

OriginLab OriginPro's OPJ file parser lacks validation of user-supplied data, causing an out-of-bounds write that can execute arbitrary code in the process context; exploitation requires a user to open a malicious OPJ file. No patch version or in-the-wild exploitation details are provided in the ...