Asif Nadaf

Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program header counts. Attackers can supply a crafted 128-byte ELF file that triggers an OutOfMemoryError during load-spec discovery at import or in headless analysis pipelines.

**Name of the Vulnerable Software and Affected Versions** Ghidra versions 11.2 through 12.1.4 **Description** A heap out-of-bounds read occurs in the `StringManager::getCodepoint()` function when decoding multi-byte UTF-8, UTF-16, or UTF-32 characters without validating the remaining buffer length. An attacker can use malicious binaries containing constant byte stores that end in multi-byte lead units to trigger this issue, resulting in a decompiler crash or the leakage of adjacent heap memory into the decompiled output. **Recommendations** Update Ghidra to a version later than 12.1.4.