Approved changes feed: RSS · Atom
cpe:2.3:a:national_security_agency:ghidra:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | National Security Agency (d9fe8f6d-419a-5fc8-8124-494cc568d188) |
|---|---|
| Product | Ghidra (c3387d32-f043-5fca-aa07-17b62b6bd490) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18718 |
vulnerable | 2026-09-16 04:34:02.194080 |
Ghidra Swift Demangler Analyzer Arbitrary Code Execution via Project State
HIGH (7)
Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious Ghidra project with a crafted Swift tool directory path. When a victim opens the attacker-supplied project, SwiftDemanglerAnalyzer restores the persisted Swift binary directory from project state and SwiftNativeDemangler executes the resolved binary without integrity or signature verification, causing attacker-controlled executables to run under the Ghidra process user with no prompt or confirmation.
Published: 2026-08-03T16:54:17.653Z
Updated: 2026-11-08T14:01:08.783Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.