CVE-2026-96273

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.1.4

Description The software fails to validate the TYPE COL byte within the createUnregisteredOption() function of the OptionsDB class. This lack of validation can lead to an ArrayIndexOutOfBoundsException, which results in domain objects becoming permanently locked. A remote actor can exploit this by crafting a malicious program database file that, upon import, causes the application to stall and prevents the graceful shutdown of the system or the cleanup of resources.

Recommendations Update to version 12.1.4 or later.