[ Vendor · 11 CVEs ]
NationalSecurityAgency
CVEs affecting NationalSecurityAgency published in the last 30 days, plus any NationalSecurityAgency CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115398 | 22 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem… | |
| CVE-2026-115503 | 22 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows… | |
| CVE-2026-115394 | 22 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via… | |
| CVE-2026-115395 | 22 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP… | |
| CVE-2026-115396 | 22 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit… | |
| CVE-2026-115397 | 22 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every… | |
| CVE-2026-113604 | 20 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated… | |
| CVE-2026-100504 | 26 Sep 2026 | CVSS 7.0 | NationalSecurityAgency ghidraGhidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing… | Fix |
| CVE-2026-100505 | 26 Sep 2026 | CVSS 4.4 | NationalSecurityAgency ghidraGhidra versions 9.2 through 12.1.4 contain a heap out-of-bounds read vulnerability in StringManager::getCodepoint when decoding multi-byte UTF-8… | Fix |
| CVE-2026-100503 | 26 Sep 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale… | Fix |
| CVE-2026-96273 | 23 Sep 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that… |