ghidra
- Software type
- Developer tool
- Total vulnerabilities (90 days)
- 12
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/23/2026, ghidra recorded 12 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of ghidra and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-115503Ghidra before 12.2 Denial of Service via Compressed Extension ArchiveCVE-2026-115398Ghidra before 12.2 Denial of Service via TAR and ZIP File System MountCVE-2026-115397Ghidra before 12.2 Denial of Service via Extension Archive InstallCVE-2026-115396Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme ArchiveCVE-2026-115395Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-115503Ghidra before 12.2 Denial of Service via Compressed Extension Archive | Exploitation statusNot confirmed | FixYes |
| SeverityMedium |
CVE-2026-115398Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount | Exploitation statusNot exploited | FixYes | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-115397Ghidra before 12.2 Denial of Service via Extension Archive Install | Exploitation statusNot confirmed | FixYes | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-115396Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive | Exploitation statusNot confirmed | FixYes | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-115395Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme() | Exploitation statusNot confirmed | FixYes | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-115394Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation | Exploitation statusNot exploited | FixYes | Published10/22/2026 | SeverityMedium |
|---|
CVE-2026-113604Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts | Exploitation statusNot exploited | FixYes | Published10/20/2026 | SeverityMedium |
|---|
CVE-2026-100505Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityMedium |
|---|
CVE-2026-100504Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128 | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-100503Ghidra through 12.1.4 Heap Use-After-Free in Decompiler | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityMedium |
|---|
26 Results | Page 1 of 3