CVE-2026-115397 in Ghidra
Сводка
по MITRE • 23.10.2026
Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesystem inodes, causing project writes and other processes to fail.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.