Nsa Ghidra vulnerabilities

• nationalsecurityagency ghidra Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser CVE-2026-116012 Public exploit 2.0 LowOctober 24, 2026
• nationalsecurityagency ghidra Ghidra before 12.2 Denial of Service via Compressed Extension Archive CVE-2026-115503 6.8 MediumOctober 22, 2026
• nationalsecurityagency ghidra Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount CVE-2026-115398 6.8 MediumOctober 22, 2026
• nationalsecurityagency ghidra Ghidra before 12.2 Denial of Service via Extension Archive Install CVE-2026-115397 6.8 MediumOctober 22, 2026
• nationalsecurityagency ghidra Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive CVE-2026-115396 6.8 MediumOctober 22, 2026
• nationalsecurityagency ghidra Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme() CVE-2026-115395 6.8 MediumOctober 22, 2026
• nationalsecurityagency ghidra Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation CVE-2026-115394 6.8 MediumOctober 22, 2026
• nationalsecurityagency ghidra Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts CVE-2026-113604 6.8 MediumOctober 20, 2026
• nationalsecurityagency ghidra Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager CVE-2026-100505 4.8 MediumSeptember 26, 2026
• nationalsecurityagency ghidra Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128 CVE-2026-100504 7.3 HighSeptember 26, 2026
• nationalsecurityagency ghidra Ghidra through 12.1.4 Heap Use-After-Free in Decompiler CVE-2026-100503 4.8 MediumSeptember 26, 2026
• nationalsecurityagency ghidra Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB CVE-2026-96273 6.8 MediumSeptember 23, 2026
• nationalsecurityagency ghidra Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb CVE-2026-54389 6.7 MediumAugust 20, 2026
• national security agency ghidra Ghidra Swift Demangler Analyzer Arbitrary Code Execution via Project State CVE-2026-18718 Public exploit 7.1 HighAugust 3, 2026
• ghidra Ghidra < 12.1.1 - Denial of Service via Uncontrolled Memory Allocation in Mach-O Parser CVE-2026-52759 6.7 MediumJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search CVE-2026-52758 8.7 HighJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilation CVE-2026-52757 4.6 MediumJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server CVE-2026-52756 6.3 MediumJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import CVE-2026-52755 8.4 HighJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule CVE-2026-52754 8.7 HighJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol CVE-2026-52753 6.7 MediumJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Names CVE-2026-52752 8.4 HighJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.1 - Remote Code Execution via Unfiltered RMI Deserialization in Shared Project Connection CVE-2026-52751 8.6 HighJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.1- Command Injection via URL Annotation Click CVE-2026-52750 7.3 HighJune 10, 2026
• nationalsecurityagency ghidra Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username CVE-2026-49498 8.7 HighJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.1 - Path Traversal via .gnu_debuglink in DWARF External Debug File Resolution CVE-2026-49497 4.6 MediumJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation CVE-2026-49496 6.9 MediumJune 10, 2026
• nationalsecurityagency ghidra Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser CVE-2026-49495 6.7 MediumJune 10, 2026
• nationalsecurityagency ghidra Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order CVE-2024-58350 2.1 LowJune 10, 2026
• nsa ghidra NSA Ghidra Auto-Analysis Annotation Command Execution CVE-2026-4946 8.8 HighMarch 29, 2026
• nsa ghidra Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided... CVE-2023-22671 9.8 CriticalJanuary 6, 2023
• nsa ghidra NSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a... CVE-2019-17664 7.8 HighOctober 16, 2019
• nsa ghidra NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the... CVE-2019-17665 7.8 HighOctober 16, 2019
• nsa ghidra NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if... CVE-2019-16941 Public exploit 9.8 CriticalSeptember 28, 2019
• nsa ghidra NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported,... CVE-2019-13625 9.1 CriticalJuly 17, 2019
• nsa ghidra In NSA Ghidra through 9.0.4, path traversal can occur in RestoreTask.java (from the package... CVE-2019-13623 Public exploit 7.8 HighJuly 17, 2019