CVE-2026-115398
CVE-2026-115398 · Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to exhaust the Java heap and hang the session.
CVSS 6.8 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
ghidra
- Versions
- ≥ 0, < 12.2: Affected (custom)
Update to 12.2
Original sources
- https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-vvp8-22p8-x954
- https://github.com/NationalSecurityAgency/ghidra/commit/061ec06a79f4147267f6fc690b0dcf944b2d4957
- https://github.com/NationalSecurityAgency/ghidra/releases/tag/Ghidra_12.2_build
- https://github.com/NationalSecurityAgency/ghidra
- https://www.vulncheck.com/advisories/ghidra-before-12.2-denial-of-service-via-tar-and-zip-file-system-mount
- https://nvd.nist.gov/vuln/detail/CVE-2026-115398