CVE-2026-96273

Ghidra versions prior to 12.1.4 are vulnerable to a Denial of Service condition due to a lack of validation of the TYPE_COL byte within the OptionsDB.createUnregisteredOption() function. This flaw triggers an ArrayIndexOutOfBoundsException, resulting in domain objects becoming permanently locked....