Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: NationalSecurityAgency ghidra 12.2 Clear all filters
TI-2026-79485 CVE-2026-115503 · GHSA-gmcq-gg82-5fvc

Denial of service in Ghidra via compressed extension archive

Priority LOW 29

Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.0013 Published 2026-10-22 Fixed in 12.2 CWE-409
TI-2026-79483 CVE-2026-115398 · GHSA-xj66-h4r7-jmmx

Unbounded entry storage in Ghidra TAR and ZIP file system mount

Priority LOW 29

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00178 Published 2026-10-22 Fixed in 12.2 CWE-770
TI-2026-79482 CVE-2026-115397 · GHSA-2jjf-r2xm-9jmp

Resource exhaustion in Ghidra extension archive installation

Priority LOW 31

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limiting file count.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.0013 Published 2026-10-22 Fixed in 12.2 CWE-770
TI-2026-79481 CVE-2026-115396 · GHSA-fr5c-6rcj-3fw2

Resource exhaustion in Ghidra via compressed theme archive

Priority LOW 29

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compression ratio.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.0013 Published 2026-10-22 Fixed in 12.2 CWE-409
TI-2026-79480 CVE-2026-115395 · GHSA-hmjg-837r-prfv

Resource exhaustion in Ghidra via crafted theme ZIP archive

Priority LOW 29

Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.0013 Published 2026-10-22 Fixed in 12.2 CWE-770