EUVD-2026-108332

Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesyste...

CVE-2026-115396

Ghidra versions 10.3 before 12.2 are vulnerable to an improper handling of highly compressed data (CWE-409) within the ThemeReader.processIconFile() function. The root cause is a failure to limit the decompressed size or compression ratio of data. An attacker can trick a user into importing a cra...