Vulnerability Description
Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause denial of service. An attacker can supply a crafted Mach-O binary with an arbitrarily large ncmds load command count value, forcing the parser to allocate excessive heap memory without validating file size, crashing the Ghidra JVM.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nsa | Ghidra | < 12.1.1 |
Related Weaknesses (CWE)
References
- https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-v6c3-hExploitVendor Advisory
- https://www.vulncheck.com/advisories/ghidra-denial-of-service-via-uncontrolled-mThird Party Advisory
- https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-v6c3-hExploitVendor Advisory
FAQ
What is CVE-2026-52759?
CVE-2026-52759 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause denial of service. An attacker can supply a crafted Mach-O bina...
How severe is CVE-2026-52759?
CVE-2026-52759 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-52759?
Check the references section above for vendor advisories and patch information. Affected products include: Nsa Ghidra.