PT-2026-48407 · Ghidra · Ghidra
CVSS v4.0
6.9
Medium
| Vector | AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Ghidra versions prior to 12.1
Description
A heap-use-after-free issue exists in the
SleighBuilder::generatePointerAdd function. This occurs due to iterator invalidation when the PcodeCacher::allocateInstruction function reallocates the issued vector. Attackers can cause memory corruption by decompiling malicious binaries via the public Sleigh::oneInstruction C++ API, which impacts downstream consumers of the SLEIGH library.Recommendations
Update to version 12.1 or later.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ghidra