Description
A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patch is identified as 3e299685759f4f767088871de58c5d07f98ee382. A patch should be applied to remediate this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JusticeRage | Manalyze | 1.0.0 | — |
References
- VDB-408019 | JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow vdb-entry technical-description
- VDB-408019 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-94090 | CVE Analysis and Report third-party-advisory
- Submit #952519 | JusticeRage Manalyze 0.9 Out-of-Bounds Read third-party-advisory
- https://github.com/JusticeRage/Manalyze/commit/3e299685759f4f767088871de58c5d07f98ee382 patch
- https://github.com/JusticeRage/Manalyze/ product