CVE-2026-115394

Ghidra versions through 12.2 are vulnerable to an uncontrolled memory allocation vulnerability in the BinaryField.read() method. The root cause is an unchecked 32-bit length field , which allows an attacker to exhaust heap memory. By persuading a user to import a crafted GZF packed database file ...

EUVD-2026-108329

Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read that allows attackers to exhaust heap memory via an unchecked 32-bit length field. Attackers can persuade users to import a crafted GZF packed database file, triggering an OutOfMemoryError in...