Moyenne
6.8
Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in...
CVE-2026-115396
Première détection SecPulse
Paquets affectés
| Écosystème | Paquet | Concernées | Corrigé |
|---|---|---|---|
| NationalSecurityAgency | ghidra |
≥ 10.3, < 12.2 |
12.2 |
Description d'origine La description telle que publiée par la source (souvent en anglais).
Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesystem, causing later writes to fail.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
Références
- web github.com
- web github.com
- web github.com
- web github.com
- web vulncheck.com
- web nvd.nist.gov
- web github.com