CVE-2026-115395GHSA-fvwx-pwq5-3738
Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()
NationalSecurityAgency ghidra
CVSS
6.8MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 12.2ghidraCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory. Attackers can persuade users to import a crafted theme archive with many small files, exhausting inodes and disk space to deny service to the host.
Text from CVE List
Affected versions 1
- ghidraaffected: 10.3 before 12.2CVE List
References 5
- github.com/NationalSecurityAgency/ghidra/commit/b0762c3e728a6a26d80ed4943c2efd53e2569120Fixvia CVE List
- github.com/NationalSecurityAgency/ghidra/releases/tag/Ghidra_12.2_buildFixvia CVE List
- github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-fvwx-pwq5-3738Advisoryvia CVE List
- github.com/NationalSecurityAgency/ghidraAdvisoryvia CVE List
- vulncheck.com/advisories/ghidra-10.3-before-12.2-denial-of-service-via-themereader-readzipthemeAdvisoryvia CVE List