CVE-2026-96273— Ghidra before 12.1.4 Denial of Service via Crafted Database
Quick assessment
Affected
NationalSecurityAgency ghidra
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Ghidra 12.1.4 之前的版本中， 方法未对 字节进行验证，从而导致 异常，并使域对象（domain objects）永久处于锁定状态。攻击者可以构造一个恶意的程序数据库文件，当导入该文件时，会导致应用程序挂起，并阻止资源清理或优雅关闭。
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| NationalSecurityAgency | ghidra | < 12.1.4 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-96273
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ghidra before 12.1.4 Denial of Service via Crafted Database
Source: CVE Program / CVE List V5
Vulnerability Description
Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and prevents resource cleanup or graceful shutdown.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
抛出异常的清理不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NationalSecurityAgency | ghidra | 0 ~ 12.1.4 | - |
|
II. Public POCs for CVE-2026-96273
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-96273
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-96273 (1)
Vendor Pages for CVE-2026-96273 (1)
Other References for CVE-2026-96273 (3)
IV. Related Vulnerabilities
Same product: ghidra
-
CVE-2026-100504
Ghidra through 12.1.4 Stack-based Buffer Overflow via leftsh -
CVE-2026-100505
Ghidra 11.2 through 12.1.4 Heap Out-of-Bounds Read via Strin -
CVE-2026-100503
Ghidra through 12.1.4 Heap Use-After-Free in Decompiler -
CVE-2026-54389
Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via -
CVE-2026-18718
Ghidra Swift Demangler Analyzer Arbitrary Code Execution via
Same vendor: NationalSecurityAgency
-
CVE-2026-100504
Ghidra through 12.1.4 Stack-based Buffer Overflow via leftsh -
CVE-2026-100505
Ghidra 11.2 through 12.1.4 Heap Out-of-Bounds Read via Strin -
CVE-2026-100503
Ghidra through 12.1.4 Heap Use-After-Free in Decompiler -
CVE-2026-54694
NationalSecurityAgency/skills-service has Stored XSS via Use -
CVE-2026-54389
Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via
Same weakness: CWE-460
-
CVE-2026-93710
Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a -
CVE-2026-86748
Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archi -
CVE-2026-61387
Eclipse Milo 资源管理错误漏洞 -
CVE-2026-48524
PyJWT: PyJWKClient unbounded JWKS endpoint requests via atta -
CVE-2026-40583
UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant
V. Comments for CVE-2026-96273
No comments yet