Approved changes feed: RSS · Atom
cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nsa (ff9189df-f929-5eb3-8c24-633cf968186e) |
|---|---|
| Product | Ghidra (8256d964-8b3e-541c-b30f-54dd5eb65fb2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nationalsecurityagency/ghidra |
purl2cpe | 2026-06-01 10:17:18.251580 |
pkg:gitlab/kalilinux/ghidra |
purl2cpe | 2026-06-01 10:17:18.251584 |
pkg:rpm/opensuse/ghidra |
purl2cpe | 2026-06-01 10:17:18.251587 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-113604 |
vulnerable | 2026-11-03 10:16:27.282011 |
Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts
MEDIUM (5.5)
Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program header counts. Attackers can supply a crafted 128-byte ELF file that triggers an OutOfMemoryError during load-spec discovery at import or in headless analysis pipelines.
Published: 2026-10-20T15:40:31.409Z
Updated: 2026-10-20T16:19:49.190Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-115395 |
vulnerable | 2026-11-03 10:15:37.701958 |
Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()
MEDIUM (5.5)
Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space to deny service to the host.
Published: 2026-10-22T19:14:00.814Z
Updated: 2026-11-05T16:31:36.134Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-115503 |
vulnerable | 2026-11-03 10:15:37.687387 |
Ghidra before 12.2 Denial of Service via Compressed Extension Archive
MEDIUM (5.5)
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space. Attackers can persuade users to install a crafted zip bomb extension archive that expands without size limits, causing later writes by Ghidra and other applications to fail.
Published: 2026-10-22T19:14:03.831Z
Updated: 2026-11-05T16:30:34.220Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-115394 |
vulnerable | 2026-11-03 10:15:37.619788 |
Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation
MEDIUM (5.5)
Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length field. Attackers can persuade users to import a crafted GZF packed database file, triggering an OutOfMemoryError in PackedDatabase.open() that aborts the import and denies service.
Published: 2026-10-22T19:14:00.068Z
Updated: 2026-10-23T15:00:37.926Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-115398 |
vulnerable | 2026-11-03 10:15:37.538981 |
Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount
MEDIUM (5.5)
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to exhaust the Java heap and hang the session.
Published: 2026-10-22T19:14:03.058Z
Updated: 2026-10-23T15:00:30.147Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-115396 |
vulnerable | 2026-11-03 10:15:37.507745 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-115397 |
vulnerable | 2026-11-03 10:15:37.253588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-100504 |
vulnerable | 2026-11-03 10:15:33.343949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-100503 |
vulnerable | 2026-11-03 10:15:33.188961 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116012 |
vulnerable | 2026-11-03 10:15:21.303482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-96273 |
vulnerable | 2026-10-13 12:28:33.393870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52759 |
vulnerable | 2026-07-29 00:57:48.956948 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52758 |
vulnerable | 2026-07-29 00:57:48.951326 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52757 |
vulnerable | 2026-07-29 00:57:48.951180 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52756 |
vulnerable | 2026-07-29 00:57:48.951000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52755 |
vulnerable | 2026-07-29 00:57:48.950726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52754 |
vulnerable | 2026-07-29 00:57:48.950443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52753 |
vulnerable | 2026-07-29 00:57:48.950064 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52752 |
vulnerable | 2026-07-29 00:57:48.949909 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52751 |
vulnerable | 2026-07-29 00:57:48.949746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52750 |
vulnerable | 2026-07-29 00:57:48.949544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49498 |
vulnerable | 2026-07-29 00:57:45.497729 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49497 |
vulnerable | 2026-07-29 00:57:45.497516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49496 |
vulnerable | 2026-07-29 00:57:45.497147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49495 |
vulnerable | 2026-07-29 00:57:45.496720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-58350 |
vulnerable | 2026-07-28 23:04:19.525835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4946 |
vulnerable | 2026-06-08 08:07:02.687609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22671 |
vulnerable | 2026-06-08 05:54:26.871881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17665 |
vulnerable | 2026-06-08 05:13:10.936221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17664 |
vulnerable | 2026-06-08 05:13:10.935937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16941 |
vulnerable | 2026-06-08 05:13:09.623071 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13625 |
vulnerable | 2026-06-08 05:12:52.222731 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13623 |
vulnerable | 2026-06-08 05:12:52.220996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.