CVE-2026-95958

LowCVSS 3.3

Published: 23/09/2026(UTC)Updated: 23/09/2026(UTC)Translated: 23/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

A security flaw in JusticeRage Manalyze 1.0.0. The function PE::_parse_relocations in manape/pe.cpp of the PE Parser component is affected. Manipulating the BlockSize argument results in integer underflow. The attack requires local access. A patch named c372b6bbca9d8c63812be50596fefa4a79c65fd0 is recommended.

Risk Assessment

A local attacker could exploit the integer underflow to cause unexpected behavior or potentially execute code in the context of the application.

Recommendation

Apply the patch c372b6bbca9d8c63812be50596fefa4a79c65fd0 or upgrade Manalyze to a version that includes the fix.

Other vulnerabilities in Manalyze

CVE-2026-94090Medium
A security flaw has been discovered in JusticeRage Manalyze 1.0.0 in the function PE::_parse_debug of file manape/pe.cpp (PE Parser component). Manipulation of the misc.Length argument results in an integer underflow. The attack may be performed remotely, and the patch is identified as 3e299685759f4f767088871de58c5d07f98ee382.

Original NVD description (English source)

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch is named c372b6bbca9d8c63812be50596fefa4a79c65fd0. It is recommended to apply a patch to fix this issue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS