CVE-2026-100503 — Ghidra through 12.1.4 Heap Use-After-Free in Decompiler
Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. At…
Published: 2026-09-26 · CVSS: 4.8 · CVSS 4.0
Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilation, causing the decompile helper process to crash and denying service to analysts and automated analysis pipelines.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7