CVE-2026-115395

Name of the Vulnerable Software and Affected Versions Ghidra versions 10.3 through 12.1

Description A resource allocation without limits issue exists in the readZipTheme() function of ThemeReader. This occurs when the software extracts an unlimited number of theme ZIP entries into the images directory. An attacker can exploit this by tricking a user into importing a specially crafted theme archive containing numerous small files, which leads to the exhaustion of inodes and disk space, resulting in a denial of service for the host system.

Recommendations Update Ghidra to version 12.2 or later.