GH
Product
ghidra
27
CVEs
0
On KEV
8.8
Max CVSS
8
New 30D
Severity mix
Critical 0High 8Medium 17Low 2
Watch
Add ghidra to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-52756 | 6.5 | Jun 10 | Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server Affected: before 12.2 |
| CVE-2026-49496 | 6.1 | Jun 10 | Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation Affected: before 12.1 |
| CVE-2026-115503 New | 5.5 | Oct 22 | Ghidra before 12.2 Denial of Service via Compressed Extension Archive Affected: before 12.2 |
| CVE-2026-115398 New | 5.5 | Oct 22 | Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount Affected: before 12.2 |
| CVE-2026-115397 New | 5.5 | Oct 22 | Ghidra before 12.2 Denial of Service via Extension Archive Install Affected: before 12.2 |
| CVE-2026-115396 New | 5.5 | Oct 22 | Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive Affected: 10.3 before 12.2 |
| CVE-2026-115395 New | 5.5 | Oct 22 | Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme() Affected: 10.3 before 12.2 |
| CVE-2026-115394 New | 5.5 | Oct 22 | Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation Affected: through 12.2 |
| CVE-2026-113604 | 5.5 | Oct 20 | Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts Affected: 10.2 through 12.1.4 |
| CVE-2026-100503 | 5.5 | Sep 26 | Ghidra through 12.1.4 Heap Use-After-Free in Decompiler Affected: through 12.1.4 |
| CVE-2026-96273 | 5.5 | Sep 23 | Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB Affected: before 12.1.4 |
| CVE-2026-54389 | 5.5 | Aug 20 | Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb Affected: before 12.1.3 |
| CVE-2026-52753 | 5.5 | Jun 10 | Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol Affected: before 12.0.3 |
| CVE-2026-49495 | 5.5 | Jun 10 | Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser Affected: 10.2 before 12.1 |
| CVE-2026-100505 | 4.4 | Sep 26 | Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager Affected: 9.2 through 12.1.4 |
| CVE-2026-52757 | 4.4 | Jun 10 | Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilation Affected: before 12.1 |
| CVE-2024-58350 | 4.0 | Jun 10 | Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order Affected: before 11.2 |
Showing 17