sleigh

Sleigh Library Sleigh is a language used to describe the semantics of instruction sets of general-purpose microprocessors, with enough detail to facilitate the reverse engineering of software compiled for these architectures. It is part of the Ghidra reverse engineering platform and underpins two...

rizin

Rizin Rizin is a reverse engineering framework, born as a fork of the radare2, with a focus on usability, features and cleanliness. Rizin is portable and it can be used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a scriptable command-line hexadecimal editor able ...

isa_recovery

ISA Recovery System A reverse-engineering pipeline that turns a firmware binary and its possibly-wrong disassembly into a working Ghidra processor specification. When you hit a proprietary processor with no documentation and no Ghidra support, this tool recovers the real encoding of each...

Ghidra-Rare

Ghidra-Rare Ghidra processor modules SLEIGH for uncommon CPU, DSP and GPU architectures. Target: Ghidra 12.1.4. This project brings to Ghidra the set of architectures covered by Mr-wolf-is-me/IDA-Processor-Modules, a collection of IDA Pro processor modules. Each module here is the Ghidra...

maat

Acerca de Maat es un framework de código abierto para Ejecución Simbólica Dinámica y Análisis Binario. Proporciona diversas funcionalidades como ejecución simbólica, análisis de taint, resolución de restricciones, carga de binarios, simulación de entorno, y aprovecha la librería sleigh de Ghidra...

rz-ghidra

rz-ghidra Esta es una integración del descompilador de Ghidra y el desensamblador Sleigh para Rizin. Está basada únicamente en la parte del descompilador de Ghidra, que está escrita completamente en C++, por lo que Ghidra en sí no es necesario en absoluto y el plugin se puede compilar de forma...

Malicious code in elf-stats-tinsel-sleigh-669 (npm)

Source: amazon-inspector ea0f6663d5e999d515c8873ef2ea13aeeac00025c4aceaa81a2b5178991461be The package elf-stats-tinsel-sleigh-669 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-snowy-sleigh-766 (npm)

Source: amazon-inspector d3bce5562876d0696c0939c6b8279bd368db5664dd893ed64ad9b73bc8270cde The package elf-stats-snowy-sleigh-766 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-magical-sleigh-777 (npm)

Source: amazon-inspector f73e5e3034697e77965b67b4588a8e173d9c37347df921cf4e0c4085a993249a The package elf-stats-magical-sleigh-777 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-festive-sleigh-368 (npm)

Source: amazon-inspector 2f1f4d8617d9417b57ac5d906d1d72bec6c8f342444d3aefcc2681d4f56ebcbe The package elf-stats-festive-sleigh-368 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cranberry-sleigh-853 (npm)

Source: amazon-inspector f85ae12d2f730c46ea2549c98a491f8ccccf2c8f7a484258398ce7dad89c137c The package elf-stats-cranberry-sleigh-853 was found to contain malicious code. Source: ossf-package-analysis 8c2499eb605ed1cdd8896cb21357da72fa92cbb5d8b27048115bf63144046a39 The OpenSSF Package Analysis...

Malicious code in elf-stats-cheery-sleigh-538 (npm)

Source: amazon-inspector b9733e102f5e123d456a593acf8acff3eebe9875306e5ee21df8992acd3bd373 The package elf-stats-cheery-sleigh-538 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-caroling-sleigh-970 (npm)

Source: amazon-inspector d944fe70f1da2af7a3079038cc98a40c8a7f51fe33dc01078e0e9b927247a4ed The package elf-stats-caroling-sleigh-970 was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-49496

Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...

CVE-2024-58350

Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...

CVE-2024-58350

Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...

CVE-2026-49496 Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation

Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...

EUVD-2026-36005

Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...

CVE-2024-58350 Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order

Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...

CVE-2024-58350 Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order

Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...