Medium severity5.5NVD Advisory· Published Oct 22, 2026
CVE-2026-115394
CVE-2026-115394
Description
Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length field. Attackers can persuade users to import a crafted GZF packed database file, triggering an OutOfMemoryError in PackedDatabase.open() that aborts the import and denies service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=12.2
Patches
Vulnerability mechanics
References
4- github.com/NationalSecurityAgency/ghidra/blob/Ghidra_12.2_build/Ghidra/Framework/DB/src/main/java/db/BinaryField.javanvd
- github.com/NationalSecurityAgency/ghidra/blob/Ghidra_12.2_build/Ghidra/Framework/DB/src/main/java/db/buffers/DataBuffer.javanvd
- github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-q538-hhhf-5jxpnvd
- www.vulncheck.com/advisories/ghidra-through-12.2-denial-of-service-via-binaryfield-memory-allocationnvd
News mentions
0No linked articles in our index yet.