Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-49496 EUVD-2026-36005

Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation

Published Jun 10, 2026 · Updated Jul 14, 2026 · Assigned by VulnCheck

Description

Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public Sleigh::oneInstruction C++ API, affecting downstream SLEIGH library consumers.

Affected products

VendorProductAffectedFixed
nationalsecurityagency ghidra < 12.1 12.1

References