CVE-2026-54389

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.1.3

Description The PDB parser contains an uncontrolled resource consumption issue. An attacker can crash the application by providing a specially crafted PDB file with an oversized parameters section. This occurs because the AbstractPdb deserialization routine reads all remaining parameters into an unbounded list, leading to uncontrolled heap growth. This process triggers an OutOfMemoryError, which bypasses exception handling and terminates the process.

Recommendations Update Ghidra to version 12.1.3 or later.