Uncontrolled Resource Consumption in Ghidra by National Security Agency

CVE-2026-49495

What is CVE-2026-49495?

Ghidra versions prior to 12.1 are susceptible to an uncontrolled resource consumption flaw within the ExportTrie.parseTrie() method. This vulnerability occurs when the application processes a crafted Mach-O binary that contains circular references in its export trie. The absence of cycle detection during traversal results in unbounded queue growth and excessive string concatenation, ultimately leading to an OutOfMemoryError. This condition crashes the entire Java Virtual Machine (JVM), resulting in potential data loss for users through the shutdown of the program without saving unsaved work.

References