Executive brief
Manalyze is a static analysis tool for PE (Windows executable) files. A flaw in its debug information parser can be triggered when analyzing a specially crafted PE file, leading to an integer underflow that may cause the tool to crash or potentially execute unintended code during malware analysis operations.
Technical details
An integer underflow vulnerability exists in the PE::_parse_debug function of manape/pe.cpp when processing the misc.Length field of debug directory entries. The vulnerability is triggered via remote-supplied PE files and allows an attacker to cause denial of service or potentially arbitrary code execution in the analyzer process. A patch (commit 3e29968) hardening bounded MISC debug parsing has been identified.
Affected products
- JusticeRage Manalyze 1.0.0
Timeline
- 2026-09-20: disclosed
- 2026-08-26: patched