CVE-2026-100505 Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager

Ghidra versions 9.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries containing strings or constant byte...

EUVD-2026-87374

Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries with constant byte stores ending in...

CVE-2026-100505 Ghidra 11.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager

Ghidra versions 11.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating remaining buffer length. Attackers can craft malicious binaries with constant byte stores ending in...

CVE-2026-100505

Ghidra versions 11.2 through 12.1.4 are susceptible to a heap out-of-bounds read vulnerability in the StringManager::getCodepoint function. The root cause is a failure to validate the remaining buffer length when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters. An attacker can exploit thi...