CVE-2026-115397

MEDIUM 5.5

Ghidra before 12.2 Denial of Service via Extension Archive Install

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limiting file count. Attackers who persuade a user to install a crafted extension archive with many files can exhaust filesystem inodes, causing project writes and other processes to fail.

CWE	CWE-770
Vendor	nationalsecurityagency
Product	ghidra
Published	Oct 22, 2026

Stay Ahead of the Next One

Get instant alerts for nationalsecurityagency ghidra

Be the first to know when new medium vulnerabilities affecting nationalsecurityagency ghidra are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

NationalSecurityAgency / ghidra

0 < 12.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-j5q9-fhqg-q995 github.com: https://github.com/NationalSecurityAgency/ghidra/commit/7cb4e778efb69acb1919f841ad46d0da36e77eeb github.com: https://github.com/NationalSecurityAgency/ghidra/releases/tag/Ghidra_12.2_build github.com: https://github.com/NationalSecurityAgency/ghidra vulncheck.com: https://www.vulncheck.com/advisories/ghidra-before-12.2-denial-of-service-via-extension-archive-install

Credits

Yuvraj Saxena (0xXA)