| Package | Affected versions | Patched versions |
|---|---|---|
| ghidra | < 12.2 | 12.2 |
Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesystem inodes, causing project writes and other processes to fail.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free