CVE-2026-115398

概要

参考情報

• NationalSecurityAgency/ghidra · Product
• NationalSecurityAgency/ghidra commit 061ec06 · Patch
• NationalSecurityAgency/ghidra release Ghidra_12.2_build · Release Notes
• NationalSecurityAgency/ghidra security advisory · Vendor Advisory
• vulncheck.com/advisories/ghidra-before-12.2-denial-of-service-via-tar-and-zip-file-system-mount · Third Party Advisory

ghidra のその他の脆弱性

• CVE-2026-115503中 5.5Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that …
• CVE-2026-115397中 5.5Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts e…
• CVE-2026-115396中 5.5Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to…
• CVE-2026-115395中 5.5Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited th…
• CVE-2026-115394中 5.5Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap mem…