CVE-2026-52753: Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol
Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rustdemangle function that allocates unbounded output buffers without size limits. Attackers can craft malicious Rust symbol names in binaries to trigger exponential memory allocation, causing process crashes during binary analysis.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ghidrato a version that resolves this vulnerability.Fixed in 12.0.3 - Compensating control
If you cannot upgrade immediately, run Ghidra analyses in an isolated/sandboxed environment and avoid analyzing untrusted Rust binaries to limit exposure until upgrading to Ghidra 12.0.3.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52753?
The severity of CVE-2026-52753 is rated as medium with a score of 6.7.
What type of vulnerability is CVE-2026-52753?
CVE-2026-52753 is an out-of-memory vulnerability in the rust_demangle function of Ghidra.
How do I fix CVE-2026-52753?
To fix CVE-2026-52753, update Ghidra to version 12.0.3 or later.
What causes the vulnerability in CVE-2026-52753?
The vulnerability in CVE-2026-52753 is caused by the allocation of unbounded output buffers in the rust_demangle function.
What impact does CVE-2026-52753 have on Ghidra?
CVE-2026-52753 may cause Ghidra to crash during binary analysis when processing malicious Rust symbol names.