| Package | Affected versions | Patched versions |
|---|---|---|
| ghidra | < 12.2 | 12.2 |
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space. Attackers can persuade users to install a crafted zip bomb extension archive that expands without size limits, causing later writes by Ghidra and other applications to fail.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free