EUVD-2026-87374

Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries with constant byte stores ending in...

CVE-2026-100505 Ghidra 11.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager

Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries with constant byte stores ending in...

Debian DLA-746-2 : tomcat6 regression update

The last security update introduced a regression due to the use of StringManager in the ResourceLinkFactory class. The code was removed again since it is not strictly required to resolve CVE-2016-6797. For Debian 7 'Wheezy', these problems have been fixed in version 6.0.45+dfsg-1deb7u5. We...

[SECURITY] [DLA 746-2] tomcat6 regression update

Package : tomcat6 Version : 6.0.45+dfsg-1deb7u5 Debian Bug : 848492 The last security update introduced a regression due to the use of StringManager in the ResourceLinkFactory class. The code was removed again since it is not strictly required to resolve CVE-2016-6797. For Debian 7 "Wheezy", thes...