CVE-2026-115397

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.2

Description A resource allocation without limits issue exists in the unzipToInstallationFolder() function. The software extracts every entry from an extension ZIP archive without limiting the total file count. An attacker can exploit this by persuading a user to install a specially crafted extension archive containing a massive number of files, which can exhaust filesystem inodes (index nodes used by the filesystem to store metadata about files and directories). This exhaustion leads to the failure of project writes and other system processes.

Recommendations Update to version 12.2 or later. As a temporary mitigation, avoid installing extension archives from untrusted sources.