Moyenne
6.8
Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts
CVE-2026-113604
Première détection SecPulse
Paquets affectés
| Écosystème | Paquet | Concernées | Corrigé |
|---|---|---|---|
| NationalSecurityAgency | ghidra |
10.2 – 12.1.4 |
— |
Description d'origine La description telle que publiée par la source (souvent en anglais).
Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program header counts. Attackers can supply a crafted 128-byte ELF file that triggers an OutOfMemoryError during load-spec discovery at import or in headless analysis pipelines.
Source: NIST National Vulnerability Database NVD GitHub Advisory
Références
- advisory vulncheck.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- web github.com
- web github.com