Improper Handling of Compressed Data in Ghidra Software by National Security Agency
CVE-2026-115503

6.8MEDIUM

Key Information:

Vendor: Nationalsecurityagency
Status: Ghidra
Vendor: CVE Published:; 22 October 2026

🔔 Create Nationalsecurityagency Vulnerability Alert

What is CVE-2026-115503?

Ghidra prior to version 12.2 is vulnerable to an improper handling of highly compressed data. This vulnerability, found in the ExtensionUtils.unzipToInstallationFolder() function, may enable attackers to exploit crafted zip bomb extensions. When a user installs such an archive, it can expand indefinitely, leading to exhaustion of available disk space. This ultimately causes failures in writes by Ghidra and other applications, resulting in denial of service scenarios.