EUVD-2026-108335

Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder that allows attackers to exhaust disk space. Attackers can persuade users to install a crafted zip bomb extension archive that expands without size limits, causing...

CVE-2026-115503

Ghidra versions prior to 12.2 are vulnerable to a Denial of Service attack due to improper handling of highly compressed data within the ExtensionUtils.unzipToInstallationFolder() function. An attacker can trick a user into installing a crafted zip bomb extension archive that expands without size...

EUVD-2026-108333

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesyst...

CVE-2026-115397

Ghidra versions before 12.2 are vulnerable to a resource allocation flaw in the ExtensionUtils.unzipToInstallationFolder() function. The component fails to limit the file count when extracting entries from extension ZIP archives. An attacker could trick a user into installing a crafted archive co...