Medium severity4.4NVD Advisory· Published Jun 10, 2026· Updated Jun 12, 2026
CVE-2026-52757
CVE-2026-52757
Description
Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vulnerability by crafting a binary that causes stale pointers in the HighIntersectTest::highedgemap cache to be dereferenced, reading and writing the flags field of freed heap memory when a user opens the binary in Ghidra's decompiler view.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*range: <12.1
- (no CPE)range: <12.1
Patches
Vulnerability mechanics
References
2- github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-8jqp-qv73-395rnvdExploitVendor Advisory
- www.vulncheck.com/advisories/ghidra-heap-use-after-free-in-highvariable-merge-during-decompilationnvdThird Party Advisory
News mentions
1- National Security Agency's Ghidra: 15 Vulnerabilities Disclosed on June 10, 2026Vypr Intelligence · Jun 10, 2026