CVE-2026-96273 Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB

Ghidra before 12.1.4 fails to validate the TYPECOL byte in OptionsDB.createUnregisteredOption, causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and...

PT-2026-97124

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.1.4 Description The software fails to validate the TYPE COL byte within the createUnregisteredOption function of the OptionsDB class. This lack of validation can lead to an ArrayIndexOutOfBoundsException, which...