CVE-2026-100503
LOW
CVSS 3.3
Published: 2026-09-26
Modified: 2026-09-26
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
Ghidra versions through 12.1.4 contain a heap use-after-free vulnerability in the decompiler's Funcdata::opInsertAfter function caused by stale INDIRECT effect-op references. Attackers can craft a malicious binary with a specific x86-64 sequence that triggers the vulnerability during decompilation, causing the decompile helper process to crash and denying service to analysts and automated analysis pipelines.
Quick Facts
| CVE ID | CVE-2026-100503 |
| CVSS Score | 3.3 |
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
| Published | 2026-09-26 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |