MEDIUM

CVE-2026-94090

2026-09-20 CVSS v3.1

CVSS

6.3

Description

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patch is identified as 3e299685759f4f767088871de58c5d07f98ee382. A patch should be applied to remediate this issue.

Weakness (CWE)

CWE-189 Numeric Errors

CWE-191

References

https://github.com/JusticeRage/Manalyze/ https://github.com/JusticeRage/Manalyze/commit/3e299685759f4f767088871de58c5d07f98ee382 https://vuldb.com/cve/CVE-2026-94090 https://vuldb.com/submit/952519 https://vuldb.com/vuln/408019 https://vuldb.com/vuln/408019/cti

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE