CVE-2026-96273

Ghidra versions prior to 12.1.4 are vulnerable to a Denial of Service condition due to a lack of validation of the TYPE_COL byte within the OptionsDB.createUnregisteredOption() function. This flaw triggers an ArrayIndexOutOfBoundsException, resulting in domain objects becoming permanently locked....

CVE-2026-96273: Improper Cleanup on Thrown Exception

Ghidra before 12.1.4 fails to validate the TYPECOL byte in OptionsDB.createUnregisteredOption, causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and...