CVE-2026-100504
High
Description
Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled, corrupting memory and potentially achieving code execution.
SeverityHigh
CVSS7.0
Exploit probability—
ProductNsa Ghidra
PublishedSep 26, 2026
First seenSep 26, 2026
Weakness typeCWE-787Out-of-bounds write
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nsa ghidra | v ≤ 12.1.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.