CVE-2026-115398

Medium

Description

Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can persuade a user to open or batch-import a crafted TAR or ZIP archive with excessive entries to exhaust the Java heap and hang the session.

SeverityMedium

CVSS5.5

Exploit probability—

ProductNsa Ghidra

PublishedOct 22, 2026

First seenOct 22, 2026

Weakness typeCWE-770Allocation of resources without limits

How to fix

Update

nsa ghidra12.2 or later

Patches

github.com/NationalSecurityAgency/ghidra/commit/061ec06a79f4147267f6fc690b0dcf944b2d4957

Vendor advisories

Affected products

Product	Affected versions	Fixed in
nsa ghidra	v < 12.2	12.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.