NationalSecurityAgency ghidra.

Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser

• NationalSecurityAgency ghidra
• CWE-197

Ghidra before 12.2 Denial of Service via Compressed Extension Archive

• NationalSecurityAgency ghidra
• CWE-409

Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount

• NationalSecurityAgency ghidra
• Denial of service

Ghidra before 12.2 Denial of Service via Extension Archive Install

• NationalSecurityAgency ghidra
• Denial of service

Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive

• NationalSecurityAgency ghidra
• CWE-409

Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()

• NationalSecurityAgency ghidra
• Denial of service

Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation

• NationalSecurityAgency ghidra
• Denial of service

Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts

• NationalSecurityAgency ghidra
• Denial of service

Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager

• NationalSecurityAgency ghidra
• Memory corruption

Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128

• NationalSecurityAgency ghidra
• Memory corruption

Ghidra through 12.1.4 Heap Use-After-Free in Decompiler

• NationalSecurityAgency ghidra
• Memory corruption

Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB

• NationalSecurityAgency ghidra
• CWE-460
• CWE-667

Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb

• NationalSecurityAgency ghidra
• Denial of service

Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search

• nationalsecurityagency ghidra
• SQL injection

Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilation

• nationalsecurityagency ghidra
• Memory corruption

Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server

• nationalsecurityagency ghidra
• Path traversal

Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import

• nationalsecurityagency ghidra
• Path traversal

Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule

• nationalsecurityagency ghidra
• Weak cryptography or TLS

Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol

• nationalsecurityagency ghidra
• Denial of service

Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Names

• nationalsecurityagency ghidra
• Path traversal

Ghidra < 12.1 - Remote Code Execution via Unfiltered RMI Deserialization in Shared Project Connection

• nationalsecurityagency ghidra
• Insecure deserialization

Ghidra < 12.1- Command Injection via URL Annotation Click

• nationalsecurityagency ghidra
• Command injection

Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username

• nationalsecurityagency ghidra
• SQL injection

Ghidra < 12.1 - Path Traversal via .gnu_debuglink in DWARF External Debug File Resolution

• nationalsecurityagency ghidra
• Path traversal

Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation

• nationalsecurityagency ghidra
• Memory corruption

Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser

• nationalsecurityagency ghidra
• Denial of service

Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order

• nationalsecurityagency ghidra
• CWE-758