Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-18794

OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

Description

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CalcProgrammer1 OpenRGB

Default version status: unaffected

  • 0 to ≤ 1.0rc3affected

References