CVE-2026-100504— Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128
Quick assessment
Affected
NationalSecurityAgency ghidra
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Ghidra 12.1.4 及更早版本中存在一个基于栈的越界写漏洞，该漏洞出现在反编译器的 leftshift128 函数中，当处理来自 p-code 的负数移位量时触发。攻击者可以构造包含特定指令序列的恶意二进制文件，在反编译时引发溢出，从而破坏内存，并可能实现代码执行。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-100504
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128
Source: CVE Program / CVE List V5
Vulnerability Description
Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled, corrupting memory and potentially achieving code execution.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NationalSecurityAgency | ghidra | 0 ~ 12.1.4 | - |
|
II. Public POCs for CVE-2026-100504
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-100504
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-100504 (1)
Vendor Pages for CVE-2026-100504 (1)
Other References for CVE-2026-100504 (3)
Same Patch Batch · NationalSecurityAgency · 2026-09-26 · 3 CVEs total
| CVE-2026-100505 | 4.4 MEDIUM | Ghidra 11.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager |
| CVE-2026-100503 | 3.3 LOW | Ghidra through 12.1.4 Heap Use-After-Free in Decompiler |
IV. Related Vulnerabilities
Same product: ghidra
-
CVE-2026-100505
Ghidra 11.2 through 12.1.4 Heap Out-of-Bounds Read via Strin -
CVE-2026-100503
Ghidra through 12.1.4 Heap Use-After-Free in Decompiler -
CVE-2026-96273
Ghidra before 12.1.4 Denial of Service via Crafted Database -
CVE-2026-54389
Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via -
CVE-2026-18718
Ghidra Swift Demangler Analyzer Arbitrary Code Execution via
Same vendor: NationalSecurityAgency
-
CVE-2026-100505
Ghidra 11.2 through 12.1.4 Heap Out-of-Bounds Read via Strin -
CVE-2026-100503
Ghidra through 12.1.4 Heap Use-After-Free in Decompiler -
CVE-2026-96273
Ghidra before 12.1.4 Denial of Service via Crafted Database -
CVE-2026-54694
NationalSecurityAgency/skills-service has Stored XSS via Use -
CVE-2026-54389
Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via
Same weakness: CWE-787
-
CVE-2026-100888
Trusted Domain Project OpenDKIM DKIM Signature Header Select -
CVE-2026-100740
D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_par -
CVE-2026-80431
Out-of-bounds write in the kitty text sizing protocol allows -
CVE-2026-87118
Botslab G980H Dashcams Out-of-bounds Write -
CVE-2026-96746
Heap buffer overflow via mid-scan command list growth in cli
V. Comments for CVE-2026-100504
No comments yet