CVE-2026-115396

Ghidra versions 10.3 before 12.2 are vulnerable to an improper handling of highly compressed data (CWE-409) within the ThemeReader.processIconFile() function. The root cause is a failure to limit the decompressed size or compression ratio of data. An attacker can trick a user into importing a cra...