Known vulnerabilities in Ghidra - page 2

Software: Ghidra
Software CPE: cpe:2.3:a:nsa.gov:ghidra:*:*:*:*:*:*:*:*
Total vulnerabilities: 35
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ghidra Ghidra is affected by 35 known vulnerabilities: 1 critical, 5 high, 23 medium, 6 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131574 - Improper Verification of Cryptographic Signature
CWE-347 Medium
No
No
12.1 15.05.2026 SB20260515104
#VU131573 - Command injection
CWE-77 Medium
No
No
12.1 15.05.2026 SB20260515104
#VU127895 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-4946
CWE-78 High
No
No
12.0.3 25.04.2026 SB20260425202
#VU127894 - Resource exhaustion
CWE-400 Medium
No
No
12.0.3 25.04.2026 SB20260425202
#VU122276 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 High
No
No
12.0.2 04.02.2026 SB2026020405
#VU127893 - Use After Free
CWE-416 Low
No
No
11.2 19.09.2024 SB2024091970
#VU72163 - Use of Potentially Dangerous Function
CVE-2023-22671
CWE-676 Medium
No
No
10.2.3 14.02.2023 SB2023021401
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832
CWE-94 Medium
No
No
10.1.2 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105
CWE-835 Medium
Available
No
10.1.1 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
10.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU22307 - Untrusted Search Path
CVE-2019-17664
CWE-426 Low
No
No
10.2 27.10.2019 SB2019093006
#VU22306 - Uncontrolled Search Path Element
CVE-2019-17665
CWE-427 Low
No
No
9.0.2 27.10.2019 SB2019101609
#VU21436 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13625
CWE-611 Low
No
No
9.0.1 30.09.2019 SB2019071715
#VU21435 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-13623
CWE-22 Medium
Available
No
9.1 30.09.2019 SB2019093006
#VU21434 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2019-16941
CWE-776 Medium
No
No
9.1 30.09.2019 SB2019093006


Showing elements 21 - 40 out of 35