{"id":"CVE-2026-18794","summary":"OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite","details":"The OpenRGB network protocol allows attackers to cause memory exhaustion and out-of-bounds memory reads and writes by passing inconsistent data.","modified":"2026-08-28T14:33:01.919683Z","published":"2026-08-26T09:29:57.359Z","database_specific":{"cna_assigner":"suse","cwe_ids":["CWE-1288"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/18xxx/CVE-2026-18794.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/18xxx/CVE-2026-18794.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18794"},{"type":"REPORT","url":"https://bugzilla.suse.com/show_bug.cgi?id=1274022"},{"type":"FIX","url":"https://gitlab.com/CalcProgrammer1/OpenRGB/-/commit/d2dd9dcc7369e78f47d01ace19af3750cd89ae66"},{"type":"PACKAGE","url":"https://gitlab.com/CalcProgrammer1/OpenRGB"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://gitlab.com/CalcProgrammer1/OpenRGB","events":[{"introduced":"0"},{"fixed":"d2dd9dcc7369e78f47d01ace19af3750cd89ae66"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"1.0rc3"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["release_candidate_1.0rc3","release_0.9","release_candidate_1.0rc2","release_candidate_1.0rc2wr0","release_candidate_1.0rc1","release_0.8","release_0.7","release_0.6","release_0.5","release_0.4","release_0.3","release_0.2","release_0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-18794.json","vanir_signatures_modified":"2026-08-28T14:33:01Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66","target":{"file":"ProfileManager.cpp","function":"ProfileManager::LoadProfileToList"},"deprecated":false,"digest":{"length":1092,"function_hash":"95437639852737716356002784434995179729"},"id":"CVE-2026-18794-1239d937"},{"digest":{"function_hash":"280617671278284019699804019264086409569","length":2286},"id":"CVE-2026-18794-1bdfc767","signature_type":"Function","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66","target":{"file":"NetworkClient.cpp","function":"NetworkClient::ListenThreadFunction"},"deprecated":false},{"digest":{"line_hashes":["322349998864898802794622144854412220568","208698755085950346046112989215359970760","119806124576313253900990977264906326499","284768564687001632512782562956579511671","253724389614060727870871211502056874577","64816052312727547786264032054030361871","19385456728506249526885729010249828762"],"threshold":0.9},"id":"CVE-2026-18794-1d410d88","signature_type":"Line","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66","target":{"file":"StringUtils.cpp"},"deprecated":false},{"digest":{"line_hashes":["275375697301144669591548466861494267373","93096688385561160866853160425515300003","104222903630217327410044352801766909658","139299014324504129761409869262926751735"],"threshold":0.9},"id":"CVE-2026-18794-80b989c1","signature_type":"Line","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66","target":{"file":"NetworkServer.cpp"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["161169517863380733557194438788091683508","322316876743499429116701272327275982168","215785893999238604226270163766880771181","230458920664536821973106771008226830015"],"threshold":0.9},"id":"CVE-2026-18794-9df5779e","signature_type":"Line","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66","target":{"file":"NetworkClient.cpp"}},{"deprecated":false,"digest":{"function_hash":"286853739122543647694695458753869014658","length":1074},"id":"CVE-2026-18794-b11e8c3b","signature_type":"Function","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66","target":{"file":"ProfileManager.cpp","function":"ProfileManager::SaveProfile"}},{"signature_type":"Function","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66","target":{"file":"ProfileManager.cpp","function":"ProfileManager::DeleteProfile"},"deprecated":false,"digest":{"function_hash":"249749204173706615843152028605700968386","length":240},"id":"CVE-2026-18794-b806c1fa"},{"target":{"file":"StringUtils.h"},"deprecated":false,"digest":{"line_hashes":["315673586532126711077906701193197624619","120832829731941778623600501317577548993","299656908887905861193477008307806974029"],"threshold":0.9},"id":"CVE-2026-18794-bf71aaac","signature_type":"Line","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66"},{"target":{"file":"NetworkServer.cpp","function":"NetworkServer::ListenThreadFunction"},"deprecated":false,"digest":{"function_hash":"282757793619303172934404325901327203506","length":7971},"id":"CVE-2026-18794-dd9f6c7c","signature_type":"Function","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66"},{"target":{"file":"ProfileManager.cpp"},"deprecated":false,"digest":{"line_hashes":["323107566027453662779346590227282392295","117406684580505668136167856757136736203","25083145235401289199960849757136280250","232298029481204207568784993017342293038","148832930559292644578287616493885021089","196394819639494740468563460032065282712","303815322209423144492940919573295984472","278476806288386688576281349613644007824","60582079477449156117553867818028096804","190947480793103281972024509200300418345","57108089609289319770918800717505926750","263603095521596482359072863712747898616"],"threshold":0.9},"id":"CVE-2026-18794-dfed457a","signature_type":"Line","signature_version":"v1","source":"https://gitlab.com/CalcProgrammer1/OpenRGB@d2dd9dcc7369e78f47d01ace19af3750cd89ae66"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N"}]}