OriginLab Origin Viewer has a memory corruption flaw in the parsing of OGW files. Because the data supplied by a user is not properly validated, a crafted file can overwrite memory structures and allow an attacker to execute arbitrary code in the context of the Viewer process (CWE-119). The impact is full code execution, giving the attacker control over the affected system when the file is opened.

The vulnerability affects OriginLab Origin Viewer installations. Specific version information is not disclosed in the advisory, so any installation of the product that still relies on the unpatched OGW file parser is potentially vulnerable.

The vulnerability has a CVSS score of 7.8, classifying it as high severity. No EPSS score is available, and it is not listed in the CISA KEV catalog. Exploitation requires a user to open a malicious OGW file or visit a page containing one, so the attack vector is user interaction‑based. Given the high severity and the fact that success results in full process control, the risk to affected systems is significant.