CVE-2026-115396

概要

参考情報

• NationalSecurityAgency/ghidra · Product
• NationalSecurityAgency/ghidra commit 2c2bc5b · Patch
• NationalSecurityAgency/ghidra release Ghidra_12.2_build · Release Notes
• NationalSecurityAgency/ghidra security advisory · Vendor Advisory
• vulncheck.com/advisories/ghidra-10.3-before-12.2-denial-of-service-via-compressed-theme-archive · Third Party Advisory

ghidra のその他の脆弱性

• CVE-2026-115503中 5.5Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that …
• CVE-2026-115398中 5.5Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSys…
• CVE-2026-115397中 5.5Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts e…
• CVE-2026-115395中 5.5Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited th…
• CVE-2026-115394中 5.5Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap mem…