CVE-2026-100504
Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled, corrupting memory and potentially achieving code execution.
- Published Sep 26, 2026
- CVSS 7.3 high
- 0.1% chance of exploitation in the next 30 days (EPSS)
- A fix is available