Memory Allocation Vulnerability in Ghidra by National Security Agency
CVE-2026-115394

6.8MEDIUM

Key Information:

Vendor: Nationalsecurityagency
Status: Ghidra
Vendor: CVE Published:; 22 October 2026

🔔 Create Nationalsecurityagency Vulnerability Alert

What is CVE-2026-115394?

Ghidra up to version 12.2 has a vulnerability within the BinaryField.read() method that can lead to uncontrolled memory allocation. By enticing users to import a specially crafted GZF packed database file, an attacker can exploit a 32-bit length field. This can result in heap memory exhaustion, triggering an OutOfMemoryError in the PackedDatabase.open() process. The resulting failure aborts the import, leading to a denial of service, making it critical for users to be aware and ensure their systems are updated.