CVE-2026-96273 Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB

Ghidra before 12.1.4 fails to validate the TYPECOL byte in OptionsDB.createUnregisteredOption, causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and...

CVE-2026-96273 Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB

Ghidra before 12.1.4 fails to validate the TYPECOL byte in OptionsDB.createUnregisteredOption, causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and...

CVE-2026-96273

Ghidra before 12.1.4 fails to validate the TYPECOL byte in OptionsDB.createUnregisteredOption, causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and...

PT-2026-97124

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.1.4 Description The software fails to validate the TYPE COL byte within the createUnregisteredOption function of the OptionsDB class. This lack of validation can lead to an ArrayIndexOutOfBoundsException, which...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE via the Microsoft.DiaSymReader.Native.amd64.dll file when reading a corrupted PDB file. Note: This issue only affects Windows systems. Remediation Upgrade Microsoft.NETCore.App.Runtime.win-x86 to version 6.0.22...