CERT24CVE-2026-115396 — Ghidra 10.3 before 12.2: Denial of Service via Compressed Theme ArchiveLoading data…
CERT24Threat Observatory
Period

CVE-2026-115396 — Ghidra 10.3 before 12.2: Denial of Service via Compressed Theme Archive

Ghidra 10.3 through versions before 12.2 contains a CWE-409 improper handling of highly compressed data vulnerability. An attacker can persuade a user to import a crafted theme ZIP whose icon files expand to fill the host filesystem, causing subsequent writes to fail.

← Back to intelligence

CVE-2026-115396 — Ghidra 10.3 before 12.2: Denial of Service via Compressed Theme Archive

Ghidra 10.3 through versions before 12.2 contains a CWE-409 improper handling of highly compressed data vulnerability. An attacker can persuade a user to import a crafted theme ZIP whose icon files expand to fill the host filesystem, causing subsequent writes to fail.