Known vulnerabilities in Ghidra 12.1.2

Software: Ghidra
Version: 12.1.2
Software CPE: cpe:2.3:a:nsa.gov:ghidra:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ghidra version 12.1.2 Ghidra 12.1.2 is affected by 8 vulnerabilities: 1 high, 7 medium Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144380 - Heap-based Buffer Overflow
CWE-122 Medium
No
No
12.1.3 19.08.2026 SB20260819134
#VU144379 - Resource exhaustion
CWE-400 Medium
No
No
12.1.3 19.08.2026 SB20260819134
#VU144378 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 High
No
No
12.1.3 19.08.2026 SB20260819134
#VU144377 - Resource exhaustion
CVE-2026-54389
CWE-400 Medium
No
No
12.1.3 19.08.2026 SB20260819134
#VU144376 - Resource exhaustion
CWE-400 Medium
No
No
12.1.3 19.08.2026 SB20260819134
#VU144375 - Uncontrolled Search Path Element
CVE-2026-18718
CWE-427 Medium
No
No
12.1.3 19.08.2026 SB20260819134
#VU144374 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
12.1.3 19.08.2026 SB20260819134
#VU144373 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Medium
No
No
12.1.3 19.08.2026 SB20260819134