Description (CNA)
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiting the unsafe destruction order that causes iteration over deallocated memory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| nationalsecurityagency / ghidra | affected 0 before 11.2; unaffected 11.2 |
CWE
CWE-758
References
- https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-4g43-2f29-xvp4
- https://www.vulncheck.com/advisories/ghidra-use-after-free-in-sleigh-backend-via-static-initialization-order
ADP enrichment
No English description supplied.
No references supplied.