CVE-2026-100504 | NationalSecurityAgency Ghidra up to 12.1.4 Decompiler leftshift128 out-of-bounds write

September 26, 2026 Yanac

A vulnerability has been found in NationalSecurityAgency Ghidra up to 12.1.4 and classified as problematic. Affected is the function leftshift128 of the component Decompiler. This manipulation causes out-of-bounds write.

This vulnerability is tracked as CVE-2026-100504. The attack is restricted to local execution. No exploit exists.

It is suggested to install a patch to address this issue.VulDB Recent EntriesRead More