CVE-2026-115398

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.2

Description A resource allocation without limits issue exists in the FileSystemIndexHelper component used by TarFileSystem and ZipFileSystem. These components store archive entries without bounds, allowing an attacker to cause a session hang by persuading a user to open or batch-import a specially crafted TAR or ZIP archive containing an excessive number of entries. This action exhausts the Java heap, which is the memory area used by the Java Virtual Machine to allocate new objects.

Recommendations Update to version 12.2 or later.