Medium
6.8
Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts
CVE-2026-113604
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| NationalSecurityAgency | ghidra |
10.2 – 12.1.4 |
— |
Original description The description as published by the source.
Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program header counts. Attackers can supply a crafted 128-byte ELF file that triggers an OutOfMemoryError during load-spec discovery at import or in headless analysis pipelines.
Source: NIST National Vulnerability Database NVD GitHub Advisory
References
- advisory vulncheck.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- web github.com
- web github.com