CVE-2026-115395mediumCWE-770

CVE-2026-115395: falha de média gravidade em NationalSecurityAgency ghidra

Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ghidra

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.8epss 0.1%
Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space to deny service to the host.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
NationalSecurityAgency · ghidra
CVEs relacionadas — NationalSecurityAgency ghidra

No mesmo produto, das mais perigosas para as menos.

CVE-2026-116012LOWGhidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler ParserEPSS 0.2%CVE-2026-54389MEDIUMGhidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdbEPSS 0.2%CVE-2026-115398MEDIUMGhidra before 12.2 Denial of Service via TAR and ZIP File System MountEPSS 0.2%CVE-2026-115394MEDIUMGhidra through 12.2 Denial of Service via BinaryField Memory AllocationEPSS 0.2%CVE-2026-113604MEDIUMGhidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header CountsEPSS 0.2%CVE-2026-100504HIGHGhidra through 12.1.4 Stack-based Buffer Overflow via leftshift128EPSS 0.2%