{"schema":"threatline.record/2","record":{"id":"CVE-2026-100504","aliases":[],"summary":"Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128","details":"Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled, corrupting memory and potentially achieving code execution.","categories":["Unclassified"],"product":"ghidra","vendor":"NationalSecurityAgency","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-100504","source_modified_at":"2026-10-22T09:48:43.541Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"ghidra","vendor":"NationalSecurityAgency","versions":[{"version":"0","lessThanOrEqual":"12.1.4","status":"affected","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":7.3,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00156,"percentile":0.04422,"score_date":"2026-10-23"},"published_at":"2026-09-26T00:36:32.604Z","modified_at":"2026-10-22T09:48:43.541Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-100504","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-22T09:48:43.541Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-100504","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/NationalSecurityAgency/ghidra/commit/6babe3c1cec7f5ec920dd16cdc86a02893e5b33c","tags":["patch"]},{"source":"CVE List","url":"https://github.com/NationalSecurityAgency/ghidra","tags":["product"]},{"source":"CVE List","url":"https://github.com/NationalSecurityAgency/ghidra/blob/8b6bbb857accdfa20dc5b2f5dea471178c2e9fbc/Ghidra/Features/Decompiler/src/decompile/cpp/multiprecision.cc#L29-L61","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/NationalSecurityAgency/ghidra/blob/8b6bbb857accdfa20dc5b2f5dea471178c2e9fbc/Ghidra/Features/Decompiler/src/decompile/cpp/ruleaction.cc#L7848-L7878","tags":["technical-description"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/ghidra-through-12.1.4-stack-based-buffer-overflow-via-leftshift128","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-09-28T17:40:22.713904Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-22T09:48:43.541Z","content_hash":"528889b822ef1a84b11aa55a562c0732aa48ce7545dee9e7bf85098581db6b64"}}