CVE-2026-115503 — Ghidra before 12.2 Denial of Service via Compressed Extension Archive
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk spac…
Published: 2026-10-22 · CVSS: 6.8 · CVSS 4.0
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space. Attackers can persuade users to install a crafted zip bomb extension archive that expands without size limits, causing later writes by Ghidra and other applications to fail.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7