Medium
Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive
Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compression ratio. Attackers can persuade a user to import a crafted theme ZIP whose icon entries expand to fill the host filesystem, causing later writes to fail.
Announced Group revision 1
Original source ↗CVE-2026-115396
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-115396
ghidra
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/NationalSecurityAgency/ghidra",
"vendor": "NationalSecurityAgency",
"product": "ghidra",
"versions": [
{
"status": "affected",
"version": "10.3",
"lessThan": "12.2",
"versionType": "custom"
}
],
"packageURL": "pkg:github/NationalSecurityAgency/ghidra",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-115396
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #52348 · Revision 1
- Added to Heist Feed
- Publisher date