CVE-2026-100503

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.1.5

Description A heap use-after-free issue exists in the decompiler's Funcdata::opInsertAfter() function due to stale INDIRECT effect-op references. A heap use-after-free occurs when a program continues to use a pointer after the memory it points to has been freed. An attacker can craft a malicious binary containing a specific x86-64 sequence that triggers this condition during decompilation, resulting in a crash of the decompile helper process and causing a denial of service for analysts and automated analysis pipelines.

Recommendations Update Ghidra to version 12.1.5 or later.