Product by NSA

    NSA Ghidra

    31 known vulnerabilities in NSA Ghidra (NSA), 0 of them actively exploited (CISA KEV).

    Key figures

    31

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in NSA Ghidra (NSA)
    CriticalCVE-2019-16941

    NSA Ghidra: Code Execution

    		9.8
    CriticalCVE-2023-22671

    NSA Ghidra: Command Injection

    		9.8
    HighCVE-2019-13623

    NSA Ghidra: Path Traversal

    		7.8
    CriticalCVE-2019-13625

    NSA Ghidra: XML External Entity (XXE)

    		9.1
    HighCVE-2026-52751

    Nationalsecurityagency Ghidra: Deserialization of Untrusted Data

    also in 1 other product

    		8.8
    HighCVE-2026-52750

    Ghidra < 12.1- Command Injection via URL Annotation Click

    also in 1 other product

    		7.8
    HighCVE-2026-4946

    NSA Ghidra Auto-Analysis Annotation Command Execution

    		8.8
    HighCVE-2026-52758

    Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search

    also in 1 other product

    		8.8
    HighCVE-2026-49498

    Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username

    also in 1 other product

    		8.8
    HighCVE-2026-52754

    Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule

    also in 1 other product

    		8.8
    MediumCVE-2026-115398

    Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount

    also in 1 other product

    		5.5
    MediumCVE-2026-115394

    Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation

    also in 1 other product

    		5.5
    MediumCVE-2026-115397

    Ghidra before 12.2 Denial of Service via Extension Archive Install

    also in 1 other product

    		5.5
    MediumCVE-2026-115396

    Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive

    also in 1 other product

    		5.5
    MediumCVE-2026-115503

    Ghidra before 12.2 Denial of Service via Compressed Extension Archive

    also in 1 other product

    		5.5
    MediumCVE-2026-115395

    Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme()

    also in 1 other product

    		5.5
    HighCVE-2026-100504

    Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128

    also in 1 other product

    		7.0
    MediumCVE-2026-52756

    Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server

    also in 1 other product

    		6.5
    HighCVE-2026-52755

    Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import

    also in 1 other product

    		7.8
    HighCVE-2026-52752

    Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Names

    also in 1 other product

    		7.8
    HighCVE-2019-17665

    NSA Ghidra: security vulnerability

    		7.8
    MediumCVE-2026-49496

    Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation

    also in 1 other product

    		6.1
    MediumCVE-2026-49495

    Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser

    also in 1 other product

    		5.5
    MediumCVE-2026-52753

    Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol

    also in 1 other product

    		5.5
    MediumCVE-2026-52759

    Ghidra < 12.1.1 - Denial of Service via Uncontrolled Memory Allocation in Mach-O Parser

    		5.5

    All vulnerabilities in search

    All products by NSA