JusticeRage CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM JusticeRage CVE published 2026-09-20

CVE-2026-94090

CVE-2026-94090 is an integer underflow vulnerability in the PE parser component of JusticeRage Manalyze 1.0.0. The vulnerability is located in the `PE::_parse_debug` function within the `manape/pe.cpp` file. An attacker can exploit this vulnerability remotely by manipulating the `misc.Length` argument. A patch is available, identified as `3e299685759f4f767088871de58c5d07f98ee382`.