中
6.8
Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts
CVE-2026-113604
SecPulse初出
影響パッケージ
| 種類 | パッケージ | 影響を受ける版 | 直った版 |
|---|---|---|---|
| NationalSecurityAgency | ghidra |
10.2 〜 12.1.4 |
— |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program header counts. Attackers can supply a crafted 128-byte ELF file that triggers an OutOfMemoryError during load-spec discovery at import or in headless analysis pipelines.
出典: NIST National Vulnerability Database NVD GitHub Advisory
参照URL
- advisory vulncheck.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- web github.com
- web github.com