CVE-2026-94090 PUBLISHED

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. The affected element is the function PE::_parse_debug of the file manape/pe.cpp of the component PE Parser. The manipulation of the argument misc.Length results in integer underflow. The attack may be performed from remote. The patch is identified as 3e299685759f4f767088871de58c5d07f98ee382. A patch should be applied to remediate this issue.

• akbarov (VulDB User) reporter

• VDB-408019 | JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow
• VDB-408019 | CTI Indicators (IOB, IOC, IOA)
• CVE-2026-94090 | CVE Analysis and Report
• Submit #952519 | JusticeRage Manalyze 0.9 Out-of-Bounds Read
• https://github.com/JusticeRage/Manalyze/commit/3e299685759f4f767088871de58c5d07f98ee382
• https://github.com/JusticeRage/Manalyze/

• Integer Underflow CWE
• Numeric Error CWE