Description
Ghidra 10.2 before 12.1 contains an uncontrolled resource consumption vulnerability in ExportTrie.parseTrie() that lacks cycle detection when traversing Mach-O binary export tries. A crafted Mach-O binary with circular references in the export trie causes unbounded queue growth and exponential string concatenation, triggering OutOfMemoryError that crashes the entire JVM and loses all unsaved work.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nationalsecurityagency | ghidra | 10.2 – < 12.1 | 12.1 |