CVE-2026-100504 — Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128
Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-co…
Published: 2026-09-26 · CVSS: 7.3 · CVSS 4.0
Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled, corrupting memory and potentially achieving code execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7