Description
A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch is named c372b6bbca9d8c63812be50596fefa4a79c65fd0. It is recommended to apply a patch to fix this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JusticeRage | Manalyze | 1.0.0 | — |
References
- VDB-408568 | JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow vdb-entry technical-description
- VDB-408568 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-95958 | CVE Analysis and Report third-party-advisory
- Submit #953395 | JusticeRage Manalyze 0.9 Integer Underflow third-party-advisory
- https://github.com/JusticeRage/Manalyze/commit/c372b6bbca9d8c63812be50596fefa4a79c65fd0 patch
- https://github.com/JusticeRage/Manalyze/ product