Infinite loop in Ghidra - #VU158274
Published: October 28, 2026
Vulnerability identifier: #VU158274
CSH Severity: Medium
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause a denial of service through JVM heap exhaustion.
The vulnerability exists due to an infinite loop caused by accepting negative archive-member sizes without validating forward parser progress in Ghidra's COFF archive parser when processing an untrusted archive. A remote attacker can trick a victim into opening or recursively importing a crafted .a archive with a member size of -60, causing the parser to repeatedly parse and retain the same member header until the JVM exhausts its heap and aborts the analysis run.
Affected software
Ghidra
Remediation
Install security update from vendor's website.
Ghidra - update to 12.2