Description
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiting the unsafe destruction order that causes iteration over deallocated memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nationalsecurityagency | ghidra | < 11.2 | 11.2 |