Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allocates unbounded output buffers without size limits. Attackers can craft malicious Rust symbol names in binaries to trigger exponential memory allocation, causing process crashes during binary analysis.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-m94m-fqr3-x442 Exploit, Vendor Advisory
- https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-m94m-fqr3-x442 Exploit, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.7 · nsaNVD modified 2026-10-26 11:10
Affected (CPE criteria) 1
cpe:2.3:a:nsa:ghidra:*:*:*:*:*:*:*:*
References 3
- https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-m94m-fqr3-x442 Exploit, Vendor Advisory
- https://www.vulncheck.com/advisories/ghidra-out-of-memory-in-rust-symbol-demangler-via-malformed-symbol Third Party Advisory
- https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-m94m-fqr3-x442 Exploit, Vendor Advisory