GH
Product
ghidra
27
CVEs
0
On KEV
8.8
Max CVSS
8
New 30D
Severity mix
Critical 0High 8Medium 17Low 2
Watch
Add ghidra to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-52758 | 8.8 | Jun 10 | Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search Affected: 11.0 before 12.1 |
| CVE-2026-52754 | 8.8 | Jun 10 | Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule Affected: before 12.1 |
| CVE-2026-52751 | 8.8 | Jun 10 | Ghidra < 12.1 - Remote Code Execution via Unfiltered RMI Deserialization in Shared Project Connection Affected: before 12.1 |
| CVE-2026-49498 | 8.8 | Jun 10 | Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username Affected: 11.0 before 12.1 |
| CVE-2026-52755 | 7.8 | Jun 10 | Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import Affected: before 12.0.4 |
| CVE-2026-52752 | 7.8 | Jun 10 | Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Names Affected: before 12.0.2 |
| CVE-2026-52750 | 7.8 | Jun 10 | Ghidra < 12.1- Command Injection via URL Annotation Click Affected: before 12.1 |
| CVE-2026-100504 | 7.0 | Sep 26 | Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128 Affected: through 12.1.4 |
| CVE-2026-52756 | 6.5 | Jun 10 | Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server Affected: before 12.2 |
| CVE-2026-49496 | 6.1 | Jun 10 | Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation Affected: before 12.1 |
| CVE-2026-115503 New | 5.5 | Oct 22 | Ghidra before 12.2 Denial of Service via Compressed Extension Archive Affected: before 12.2 |
| CVE-2026-115398 New | 5.5 | Oct 22 | Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount Affected: before 12.2 |
| CVE-2026-115397 New | 5.5 | Oct 22 | Ghidra before 12.2 Denial of Service via Extension Archive Install Affected: before 12.2 |
| CVE-2026-115396 New | 5.5 | Oct 22 | Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive Affected: 10.3 before 12.2 |
| CVE-2026-115395 New | 5.5 | Oct 22 | Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme() Affected: 10.3 before 12.2 |
| CVE-2026-115394 New | 5.5 | Oct 22 | Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation Affected: through 12.2 |
| CVE-2026-113604 | 5.5 | Oct 20 | Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts Affected: 10.2 through 12.1.4 |
| CVE-2026-100503 | 5.5 | Sep 26 | Ghidra through 12.1.4 Heap Use-After-Free in Decompiler Affected: through 12.1.4 |
| CVE-2026-96273 | 5.5 | Sep 23 | Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB Affected: before 12.1.4 |
| CVE-2026-54389 | 5.5 | Aug 20 | Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb Affected: before 12.1.3 |
| CVE-2026-52753 | 5.5 | Jun 10 | Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol Affected: before 12.0.3 |
| CVE-2026-49495 | 5.5 | Jun 10 | Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser Affected: 10.2 before 12.1 |
| CVE-2026-100505 | 4.4 | Sep 26 | Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager Affected: 9.2 through 12.1.4 |
| CVE-2026-52757 | 4.4 | Jun 10 | Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilation Affected: before 12.1 |
| CVE-2024-58350 | 4.0 | Jun 10 | Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order Affected: before 11.2 |
| CVE-2026-116012 New | 3.6 | Oct 24 | Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser Affected: before 12.2 |
| CVE-2026-49497 | 3.3 | Jun 10 | Ghidra < 12.1 - Path Traversal via .gnu_debuglink in DWARF External Debug File Resolution Affected: before 12.1 |
Showing 27