CVE-2026-115503

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-115503
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space. Attackers can persuade users to install a crafted zip bomb extension archive that expands without size limits, causing later writes by Ghidra and other applications to fail.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/NationalSecurityAgency/ghidra Product
https://github.com/NationalSecurityAgency/ghidra/commit/2c2bc5be182d655c9df418ac35b9782f39b6a784 Patch
https://github.com/NationalSecurityAgency/ghidra/releases/tag/Ghidra_12.2_build Release Notes
https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-mcjr-7qqr-m3w8 Vendor Advisory
https://www.vulncheck.com/advisories/ghidra-before-12.2-denial-of-service-via-compressed-extension-archive Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*
History

29 Oct 2026, 17:28

Type Values Removed Values Added
First Time Nsa
Nsa ghidra
References () https://github.com/NationalSecurityAgency/ghidra - () https://github.com/NationalSecurityAgency/ghidra - Product
References () https://github.com/NationalSecurityAgency/ghidra/commit/2c2bc5be182d655c9df418ac35b9782f39b6a784 - () https://github.com/NationalSecurityAgency/ghidra/commit/2c2bc5be182d655c9df418ac35b9782f39b6a784 - Patch
References () https://github.com/NationalSecurityAgency/ghidra/releases/tag/Ghidra_12.2_build - () https://github.com/NationalSecurityAgency/ghidra/releases/tag/Ghidra_12.2_build - Release Notes
References () https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-mcjr-7qqr-m3w8 - () https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-mcjr-7qqr-m3w8 - Vendor Advisory
References () https://www.vulncheck.com/advisories/ghidra-before-12.2-denial-of-service-via-compressed-extension-archive - () https://www.vulncheck.com/advisories/ghidra-before-12.2-denial-of-service-via-compressed-extension-archive - Third Party Advisory
CPE cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*

22 Oct 2026, 20:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-10-22 20:17

Updated : 2026-10-29 17:28

NVD link : CVE-2026-115503

Mitre link : CVE-2026-115503

CVE.ORG link : CVE-2026-115503

JSON object : View

Products Affected

nsa

  • ghidra
CWE
CWE-409

Improper Handling of Highly Compressed Data (Data Amplification)