Denial of Service Vulnerability in Ghidra by National Security Agency
CVE-2026-115395

6.8MEDIUM

Key Information:

Vendor

Nationalsecurityagency

Status
Ghidra
Vendor
CVE Published:
22 October 2026

What is CVE-2026-115395?

Ghidra 10.3 and earlier versions experience a resource allocation vulnerability in the ThemeReader.readZipTheme() function, allowing attackers to exploit the theme import feature. By convincing users to load a specially crafted theme ZIP archive containing numerous small files, an attacker can exhaust the system's inodes and disk space, leading to a denial of service condition. This vulnerability highlights the importance of implementing limits on resource allocation to prevent unintentional service disruptions.

Affected Version(s)

ghidra 10.3 < 12.2

References

https://github.com/NationalSecurityAgency/ghidra/security...
vendor-advisory
https://github.com/NationalSecurityAgency/ghidra/commit/b...
patch
https://github.com/NationalSecurityAgency/ghidra/releases...
release-notes

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yuvraj Saxena (0xXA)
.