CVE-2026-100503

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

CVE-2026-100503 Ghidra through 12.1.4 Heap Use-After-Free in Decompiler

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

CVE-2026-100503

Ghidra versions through 12.1.4 are affected by a heap use-after-free vulnerability within the decompiler's Funcdata::opInsertAfter function. The root cause is attributed to stale INDIRECT effect-op references . An attacker can trigger this vulnerability by providing a malicious binary containing ...

EUVD-2026-87372

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

CVE-2026-100503 Ghidra through 12.1.4 Heap Use-After-Free in Decompiler

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

CVE-2026-100503 Ghidra through 12.1.4 Heap Use-After-Free in Decompiler

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

CVE-2026-100503: Use After Free

Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilatio...

PT-2026-99143

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.1.5 Description A heap use-after-free issue exists in the decompiler's Funcdata::opInsertAfter function due to stale INDIRECT effect-op references. A heap use-after-free occurs when a program continues to use a...