CVE-2026-95958

JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow

Assigner: VulDB
Reserved: 22.09.2026 Published: 23.09.2026 Updated: 23.09.2026

A security flaw has been discovered in JusticeRage Manalyze 1.0.0. Impacted is the function PE::_parse_relocations of the file manape/pe.cpp of the component PE Parser. Performing a manipulation of the argument BlockSize results in integer underflow. The attack requires a local approach. The patch is named c372b6bbca9d8c63812be50596fefa4a79c65fd0. It is recommended to apply a patch to fix this issue.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X
CVSS Score: 4.8

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Local	Confidentiality	None	Confidentiality	None
Attack Complexity	Low	Integrity	None	Integrity	None
Attack Requirements	None	Availability	Low	Availability	None
Privileges Required	Low
User Interaction	None

CVSS 4.0

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C
CVSS Score: 3.3

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	Low	Integrity Impact	None
User Interaction	None	Availability Impact	Low

CVSS 3.1

CVSS Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C
CVSS Score: 3.3

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	Low	Integrity Impact	None
User Interaction	None	Availability Impact	Low

CVSS 3.0

CVSS Vector: AV:L/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C
CVSS Score: 1.7

Access Vector	Local	Confidentiality Impact	None
Access Complexity	Low	Integrity Impact	None
Authentication	Single	Availability Impact	Partial

CVSS 2.0

Product Status

Vendor	JusticeRage
Product	Manalyze
Versions	Version 1.0.0 is affected

Vendor

JusticeRage

Product

Manalyze

Versions

Version 1.0.0 is affected

Credits

akbarov (VulDB User) reporter

References

Problem Types