CVE-2026-49498

概要

参考情報

• NationalSecurityAgency/ghidra security advisory · Vendor Advisory
• vulncheck.com/advisories/ghidra-sql-injection-in-postgresql-password-change-via-unescaped-username · Third Party Advisory

ghidra のその他の脆弱性

• CVE-2026-100505中 4.4Ghidra versions 9.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte U…
• CVE-2026-100504高 7.0Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when proces…
• CVE-2026-100503中 5.5Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by st…
• CVE-2026-52759中 5.5Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause den…
• CVE-2026-52758高 8.8Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied values directly into SQL queri…