Denial of Service in Ghidra File System Management by National Security Agency
CVE-2026-115398

6.8MEDIUM

Key Information:

Vendor: Nationalsecurityagency
Status: Ghidra
Vendor: CVE Published:; 22 October 2026

🔔 Create Nationalsecurityagency Vulnerability Alert

What is CVE-2026-115398?

Ghidra versions prior to 12.2 exhibit a vulnerability in the FileSystemIndexHelper that allows for unbounded resource allocation. This issue occurs within the TarFileSystem and ZipFileSystem components, where an attacker can entice a user to load or batch-import a specially crafted TAR or ZIP archive. These malicious archives can contain an excessive number of entries, ultimately leading to Java heap exhaustion, which may cause the application session to hang. It is advised to update to the latest version to mitigate this risk.