CVE-2026-18794 — OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite

CVE-2026-18794

OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite PUBLISHED

Description (CNA)

The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.

Vendor / product	Versions
CalcProgrammer1 / OpenRGB	affected 0 through 1.0rc3

CWE-1288

CISA-ADP

No English description supplied.

No references supplied.