CVE-2026-115394

Ghidra versions through 12.2 are vulnerable to an uncontrolled memory allocation vulnerability in the BinaryField.read() method. The root cause is an unchecked 32-bit length field , which allows an attacker to exhaust heap memory. By persuading a user to import a crafted GZF packed database file ...