CVE-2026-113604 — Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts
Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program…
Published: 2026-10-20 · CVSS: 6.8 · CVSS 4.0
Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program header counts. Attackers can supply a crafted 128-byte ELF file that triggers an OutOfMemoryError during load-spec discovery at import or in headless analysis pipelines.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7