CVE-2026-113604: Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts
Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program header counts. Attackers can supply a crafted 128-byte ELF file that triggers an OutOfMemoryError during load-spec discovery at import or in headless analysis pipelines.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Ghidra 10.2 through 12.1.4 are exposed when they import or analyze attacker-supplied ELF files, including through headless analysis pipelines.
What must an attacker provide to trigger the denial of service?
An attacker needs to supply a crafted 128-byte ELF file with extended section or program header counts that cause the ELF loader to allocate excessively sized arrays during load-spec discovery.
Does exploitation require authentication or elevated privileges?
No privileges are required by the attacker, but a user must interact with the crafted file by importing it or processing it through a headless analysis pipeline.