CVE-2026-113604
- Source
- https://cve.org/CVERecord?id=CVE-2026-113604
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-113604.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-113604
- Published
- 2026-10-20T15:40:31Z
- Modified
- 2026-10-21T09:40:59Z
- Severity
-
- 6.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts
- Details
-
Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program header counts. Attackers can supply a crafted 128-byte ELF file that triggers an OutOfMemoryError during load-spec discovery at import or in headless analysis pipelines.
- Database specific
{ "cna_assigner": "VulnCheck", "cwe_ids": [ "CWE-789" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/113xxx/CVE-2026-113604.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/113xxx/CVE-2026-113604.json
- https://github.com/NationalSecurityAgency/ghidra
- https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_12.1.4_build/Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java
- https://github.com/NationalSecurityAgency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3
- https://nvd.nist.gov/vuln/detail/CVE-2026-113604
- https://www.vulncheck.com/advisories/ghidra-10.2-through-12.1.4-denial-of-service-via-elf-loader-extended-header-counts
Affected packages
Git / github.com/nationalsecurityagency/ghidra
Affected ranges
- Type
- GIT
- Repo
- https://github.com/nationalsecurityagency/ghidra
- Events
-
IntroducedLast AffectedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "10.2" }, { "last_affected": "12.1.4" } ], "source": "AFFECTED_FIELD", "strategy": "StandardRange" }, { "range": [ { "fixed": "6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3" } ], "source": "REFERENCES_COMMIT" } ] }
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-113604.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"266463501116079032407047283581504074164",
"23604789503223856181064447380471921468",
"261834206876004618325738072948528460920",
"3098498804690671826361332288468488417",
"273226393926816781240942680363441701650",
"315910367409212291674874443764517876172",
"107821876492592864122540261151179032095",
"56272765740900120366137522864650923800",
"328871236147241558783898025470411781771",
"212088377063532344346954203932047773545",
"152715179379436372120007674592810007023",
"241780431670299660374738163441155921749",
"70770769755931717379699312497715658304",
"323966911518387660824257976342450076793"
],
"threshold": 0.9
},
"id": "CVE-2026-113604-037ba51a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSectionHeader.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "184888346885683476124911300543496181696",
"length": 934
},
"id": "CVE-2026-113604-0a3f7ad7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "parseSectionHeaders"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "338157324299850077640150688527794215038",
"length": 997
},
"id": "CVE-2026-113604-1496726d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "parseStringTables"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "20589727237317599023150020848842811951",
"length": 241
},
"id": "CVE-2026-113604-167320e6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocation.java",
"function": "initElfRelocation"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "5597680205343721055085354784253595316",
"length": 501
},
"id": "CVE-2026-113604-1ecc3ec6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java",
"function": "toDataType"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "230950270738365236378755662779455034021",
"length": 126
},
"id": "CVE-2026-113604-20be57d6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSectionHeader.java",
"function": "isInvalidOffset"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"160799448646761841321108586938697992892",
"257859043565929786482905924471446177029",
"115197045054490279622674725440995144768",
"240261324399050574995584717144783760030",
"189560242523335893233261781700446863955",
"50884444045104463017552945962270779047",
"42305750297792846471727295904791740205",
"91301653205400491970752419834808500692",
"289471496635273242203896057005595848391",
"259059840379680777339163545987939850012",
"309600908261126684501178226896276121465",
"96286714995199158446725048894626371475",
"144999025948302278048894028641887374291",
"119532642046150485421912946217211724410",
"69082077122744775672364584633444176892",
"8467428953625412482138985282960652116",
"130745311436670342820508435318906374982",
"236488972809144271099919496014472908392",
"142080509790131794796878277614012209510"
],
"threshold": 0.9
},
"id": "CVE-2026-113604-26c3048c",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfProgramHeader.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "25333472908424105411970427426547214260",
"length": 1648
},
"id": "CVE-2026-113604-27a3f774",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "parseSymbolTables"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"45700985836668605634716653524802429529",
"52379134798764475220562776427348342415",
"181880005010250030640133839614027927666",
"143185825286655792415204204382605294551",
"88341991522107028281821310558969420221",
"191139332629149481892751090926006108839",
"174645466563865452359368279799167934794",
"81778179565589805735722239780000398094",
"195394777271107567359560308185824637969",
"99989916458385252763038405190038229020",
"192478254325907189754554350646860065142",
"53084702465741322890043941519617373025",
"81702936153200596531127642132282939803",
"174122778280557274176106080274299025413",
"146805994822306762150500941064246779942",
"112182589001632545957822858984443852644",
"150143007010698418471772902646622800929",
"327699947639365649832827837884366957856",
"148400290348983666398685701224425385804",
"293311536831342695151255217854210082327",
"267689783534771914532312927519781786691",
"284218035459929488203845769688643515816",
"289805856932878448287357128760488462385",
"285484629389661486134287068739630231456",
"66734614267959036147846888663524635316",
"77555060797197684088447780820302910236",
"254883875128748161940478108404324411933",
"315468659595715132497835724142821015969",
"333602252381679354601730940889648536996",
"133567174190553354390638268516491919943",
"97782100708022274810892593273659718254",
"273732198685242247944136445064928358659",
"220175369512818671638387937207797929306",
"231137294142290439186375495049421542550",
"96539469115173699040486635839177825353",
"116081647191435721129463925911065805968",
"178079749528195608894094306470609175281",
"126057592133215714246037710409792616341",
"162624658529252795844698414006492708465",
"2591499180242566075776329035761854623",
"166588640184985584851134796274778143069",
"283795083732329032497417857038178429691",
"185613619834754962000692691679158909803",
"51239867179323761802637104809844290187",
"242439857239907574683918672149524082365",
"67065307240398186090149508499495575940",
"228910510876170306786295763705366803527",
"140143618190650222123097766559152846996",
"283458621944868228410440055591749036214",
"229737761083430263976206590973724960540",
"245056600429910012820180291772065329418",
"242466767450400752632205207519267454945",
"160092006385595157204725187624370978075"
],
"threshold": 0.9
},
"id": "CVE-2026-113604-2938ceb6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbolTable.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "206966479898454826464048104885427505031",
"length": 876
},
"id": "CVE-2026-113604-2a184d62",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "getExtendedSymbolSectionIndexTable"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"26322461443968300454935233374507225972",
"50458147196927274463830564253094913498",
"238003646748019654830221350181778008621",
"152477443369215751694240393321729191244",
"146336766187641319402125911657911645771",
"281481868870642899134565912959838925618",
"291138917605531370158369499507087247945",
"300532859812303187468669796263733428707",
"28832577174174350543989219388927277296",
"271538109393910279224466970308531001882",
"130322661610799959899770634200207992776",
"265615425293801849084635914651902930070",
"167475131740418073733621755328770818138",
"29318126791310204917371075430665165921",
"191291943564661702978567822632174151952",
"21393868712426657651315777018460868762",
"244548321362637146259194954954074887222",
"149594461356207090816391861403176208088",
"220671705822558681940268845422034499818",
"256533067486332975636296389703122330378",
"100876055096318154149763009752907153207",
"20740318767635672542942130853872515973",
"140254358578533499935183656875007131096",
"141235595762375609980455947821892132861",
"134231486222608976427214368965762848883",
"231275441372330411473672435584334181459",
"242428107309222440284357648889375155042",
"125228060172174141874022491557041554562",
"165543724407486548668893955919468356153",
"20624802056249211707729559369141494604",
"288070264587704842195391190327131897605",
"41168058172220245852256407756393098179",
"111415678861286473336021940737401238353",
"137890123797976293766400656158909928108",
"228713234972488281868961020015315052887",
"7674804187531683687595052063357989120",
"216235756097835483199772986017714972650",
"71039812054852594239963875391561907831",
"67522699492079348981324482699706489611",
"239166952144741221827280679594821019346",
"277800820738616731539329167665244415489",
"255190887175567717936313752054538342207",
"280762993476611039976038375733356815592",
"256450800273856637349044336178611485345",
"159404558454291141222292532456398328385",
"57307767808912400321863531167361002885",
"327020219541417503866949791172228231594",
"151982825999093916565604243613155085506",
"155290556777067955038535790678061425552",
"325144942686946996118264605298487278191",
"184458543241649636210692161165495304039",
"28025963907194910065643742829869691608",
"82531849949288399490785617910708578036",
"34098584633132121692645992918911816094",
"252844245908840001675574264530574429321",
"322544269756185298711636936432979180899",
"56768740404508753983546267305545951940",
"6105096454234521568660816475389919669",
"261519814977253012494445693627266738762",
"158547301294174488149966542989349137861",
"53298007833426513692045460554399278229",
"114585098681862124354142085274765046052",
"255858336392690983454157025923897001135",
"94808306833186060608211424476788682423",
"253144331469910013474975812322609681186",
"182578686445322762342666521235268193711",
"149218643911672539893663020155641243550",
"76778682953815709625160589365527627392",
"206793492496970487284321350257486880825",
"288417599293080020409954457399897881283",
"293848618285347393933029928343707163476",
"28620621551159047380891727469684582012",
"159577782571961767154353908609192835033",
"294896430035057684706258723615032639030",
"254846713410989423286539405170752373",
"71775150548633531188473215195408092943",
"270320454446964135165794247342827910418",
"139824293151429566075823545252041494261",
"37030188191216425710404870852306570320",
"258285220913919381694503336947399508281",
"83521844761355867259469901085547538356",
"159274234510317495762995871693939464289",
"339549377392944755258602930187974900307",
"50549606692257342053024916333682040356",
"94678084346442182427554193751241317685",
"158087595749499179254627204822195122194",
"288338607497121051497351690191363689004",
"25142606626366902864674693592294664915",
"311381684354110120573096991923152717041",
"92385932645465150297925375522967909606",
"309053610371434334017290696850745406241",
"222701053826163937693739520844858609072",
"280446762730807212531955526793105837357",
"125539324459236046603805532097172949808",
"630069987864109805061934376247076958",
"197840200991203848490747130766535069229",
"68167005074915944055664770603375601185",
"55099769786169440677122206539241927377",
"274842708763159131090993546672619640633",
"30795016247007061408736394829113568667",
"155659498025382428719588972930124461806",
"311293104479742574418442754345080777462",
"105546757818263613636062347334861903813",
"179946989217220800741048732512033504510",
"89948388366010929228041389836928005478",
"246361576890557166089045061957083731450",
"82582169604489684545274391717685464054",
"150172633658613461310258829415240644301",
"32253885883745446217210286193926612989",
"335935754125990016415963234977506958422",
"319015440129860600982309727206655706762",
"100872729265646288253375507022259801051",
"190616624257443468974687398822176082565",
"99947368340444220046456276351572722143",
"304506852066464571188256121696414400327",
"228823175882398139860673790904148462873",
"32358939567037357782123834938415000892",
"121100054619428150278100213643837829526",
"172947504025903645318898335301722311753",
"24644791839909733740407903324132607487",
"117599700475036315385646320697967144547",
"264187463666485673448794063688386627430",
"263291048868359393012058269637201393184",
"197700457356190964001436257748003844937",
"217984751851690449038684158324307164134",
"309772746597837758629959823945776920931",
"337368142265489089994846277901033264716",
"300775191914894234031812763825217280368",
"279338152439801411415286023274196471949",
"210251798487935609077704160601435720892",
"150805095796375212294291878687705979357",
"216657935790793839468163902974176836138",
"254221333186361634902320415387239283347",
"237581620805084799472894064054219484092",
"314265434588492302207206283879850681911",
"282559686728438191516947714543283545743",
"91959004706038894330683507017452528179",
"256848845733570637033615458215732289738",
"173103958669505793911691036997251549288",
"172475545501231387498222073998666218388",
"313757098422541634507235002145223229703",
"235092636740193138869989947614992197656",
"121135647835780024182099076934741177753",
"182962389557860457931653629244709594432",
"165499168066834542585854869703963519276",
"88278804340562738483104690761604021410",
"261397934188246779399457342546338699481",
"68874456145415627186016392077993008495",
"266111047254797248851009424332577818993",
"93163382740226049263204062636381157297",
"310094089939080135306293851803178737569",
"245693562102011134927364626275242078120",
"195525013563981632578925784325171546498",
"46401204009473672656885404581732410421",
"280892791319052292225861612468144984337",
"129675571072015338507564445586638345446",
"321923777168003411672819558629283133049",
"299010995422806138167204382707317741223",
"259296065675656548831425873302408235422",
"320102978424854130818606710265629439949",
"103906399243175593507446308085244392050",
"131390439096429843103310498992246802880",
"265592362266766965734134269165345213451",
"256951561896026960175846496678033272782",
"12577406374924783045807667274878741554",
"11478005336426541511174637012994635600",
"96320296234960914066050158603218283806",
"54475242090743982856495869619102412157",
"234454727566504621566460831461678330571",
"212882808972008059516406943364719240832",
"228351925788121947097051473158503272496",
"115777621621926952613243330886297944308",
"324020867849350877210489482904030190161",
"38019762666646322763005162227869807057",
"57804444290124576135043622025148384856",
"291354445585766996361309206379917650361",
"148610333866010335375419505374998470613",
"281654969932352960935228883497356857240",
"21774389800321834837254764154349218636",
"280410489935213288578070481939867074175",
"278102129941081022831750248727667587325",
"205665057531941742695289210128070167621",
"188061480080510023651779086403494780159",
"60703559471117446943740383958829790930",
"297272853407162732276297527253366750622",
"298427727674888502803012291952801934610",
"23720088117629582101413455149607187198",
"40107101930012699203261607604899154377",
"87549611131741355035720863474293624213",
"90207097601429597011080534409154719474",
"311870434400740424281220846314563623841",
"60198179724999182273737177648516962385",
"99921528321906051617997947253063225532",
"176126669682681274122854489456472705980",
"310316707221721442192688894571954478397",
"72751642115385706806843308007679128659",
"90876706539460871106967668125505568522",
"242293729924368964564782654946649452983",
"270643070524227032700009323936309219637",
"146021935043336381457664567446702774796",
"176648004488897995610771265940575222072",
"289155900821038092066804016257490709298",
"137475801488105818009460088774874332846",
"153862728192016913310622639599604899249",
"187125076194581165493539816495969637509",
"137886045482749475908104752990857884927",
"180579871965157227622363852669570560904",
"110300107287447098899172283568500536413",
"6915036947106669962795914628568590038",
"311534551221037058425232612288294850256",
"221084543986536864115782871556365857555",
"206851659636757485757545793825494031181",
"57017683337793456976727975644586149083",
"38556847380543019702759978498719420706",
"160218774385155094204542923351986893740",
"52270672926890766366506683737909003092",
"162578224020740111692736859608955136662",
"20320341782173983033699508791978537299",
"203636904543994229852458425090032958538",
"11023241078684178785065323100629415442",
"316563412673081273528767948795823898997",
"303664741983458462472962725094605192399",
"102175296230944715208391992529251551971",
"88516720900129039208838042860211605315",
"161022023893865059984044023055434932860",
"20499844034673204987911799878981768743",
"152045735581554630827288497782017771866",
"140167287702226247456453576858534686953",
"272471647665274478489169773421519628156",
"305792143200584015710262500765222485494",
"195811553746739335562415312234462328746",
"267335112783047358363167601109995514019",
"111971662430372682481634083082011428672",
"16942263339395097622001951180605856976",
"258058165897919350839394907887391063212",
"63715603303222518881863714037513335685",
"297536669429856822873914688827078207860",
"38459473706827472655341188093219095887",
"124828284311700428117615070520644858124",
"248093751058243943945958062702278366921",
"190732374908141558333017182924288939364",
"337361263439645506424221758518141594827",
"258859661404918457059776135551288652437",
"194263682389878376556586216596605528015",
"156804340915509226999803665732963652666",
"246248951157847349780854409901389827886",
"26369392080689936052860586914732285863",
"227174566036256700116914653875153188308",
"153746561912922622870576596804042288252",
"324043306179763926888557438218849609440",
"53609857600438106224034935718318690449",
"92996960450896936041054777927699801651",
"219385364579096632954366069615868374824",
"194372579210819597234527861267093480003",
"280563962796141116400238309828197906168",
"292051389261684002985703249285666670317",
"40499485519268093618287914082021803311",
"23259174882035016779798289538841192192",
"330741051464766883367497512998568622390",
"250658419119276807317416631725153102749",
"287588581273000907641209045814509990347",
"121028455885580795511216054825959860070",
"49591940663061625072696920842185531083",
"105643459581837580773141557358236493576",
"180953008475554319054062964695674392533",
"160163079841361709248443681185421742376",
"213817560874985399886817591851684116848",
"257553795963604368220684133082106788414",
"46929801760242970198169937935047031923"
],
"threshold": 0.9
},
"id": "CVE-2026-113604-2a6c7859",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "232252575038778785046283555909876270315",
"length": 847
},
"id": "CVE-2026-113604-2c1eddd5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSectionHeader.java",
"function": "ElfSectionHeader"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "332556252006247993070361146563642527716",
"length": 382
},
"id": "CVE-2026-113604-339eae41",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java",
"function": "markupRelocationTable"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "229837691181745665600824066512729763399",
"length": 1682
},
"id": "CVE-2026-113604-39054eff",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "parseDynamicSymbolTable"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "265144939485829760786755298201439666036",
"length": 770
},
"id": "CVE-2026-113604-3e4993c5",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "determineHeaderEndianness"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "102769076118862559942522138174301394963",
"length": 267
},
"id": "CVE-2026-113604-3e5bdedf",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "readExtendedSectionHeaderCount"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "202391854305159522199372294478960949062",
"length": 708
},
"id": "CVE-2026-113604-440e9aa3",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfProgramHeader.java",
"function": "ElfProgramHeader"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "334788376498659579511219369484569006223",
"length": 1011
},
"id": "CVE-2026-113604-45158b61",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbolTable.java",
"function": "ElfSymbolTable"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "226338968918130634708818942160964852234",
"length": 566
},
"id": "CVE-2026-113604-46379542",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java",
"function": "markupSymbolTable"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "255975444178419484879673410919696134791",
"length": 229
},
"id": "CVE-2026-113604-50c5478c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "getSection0"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "308058044881624479505058090147649927771",
"length": 1180
},
"id": "CVE-2026-113604-685d7c69",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "parseDynamicRelocTable"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "105386827144396614022168161211494172688",
"length": 807
},
"id": "CVE-2026-113604-6cff2015",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java",
"function": "ElfRelocationTable"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"110609666138122707732808919148513701487",
"32600241403041333131469130232667079357",
"41074538815072878112093617738847293141",
"154104551528901599307195586043023867562",
"130619666845231364222482700947566119874",
"170915766105211453303563358899811289022",
"269040405647765568013816860756947806231",
"264569844216836773882940823630871414105",
"27722247148610699604657350820628200939",
"308894630782326808841154436803961373244",
"260298768155561549033365351219380671209",
"324688772206390227139663011165412770700",
"84369575181193714778905776598965892766",
"56018155911953508720966664835759973860",
"38602212149896474908851127970619690144",
"208798153521660795478713891693424405032",
"15617962421132817294838675845630764570",
"310850620815972925792028004511255709105",
"30331282138567043478605138448893659570",
"331612192480382568174644725083486015346",
"15731441505772412962610859273448322549",
"202506893436457154556996083030326996828",
"329518632999790146518714244469776717192",
"240011720759000896118542516275831964037",
"279264515950263417252112537860255270006",
"172114867857237704994289358928214124691",
"67612816389144695004706868598284563830",
"213134151667978640425165446901762254156",
"324688772206390227139663011165412770700",
"84369575181193714778905776598965892766",
"93832873703863051330452375729818380170",
"192664166100071617510024273878248557173",
"262870169143284048323093061702993158763",
"268814236104948766789434899724439621897",
"140741642851534442453436909341038240291",
"177147752094995554469067189101638374557",
"74760748336035490407831804574648268292",
"208831564784458256772047313355734299936",
"162014050011531871142597308474360531247",
"71511243278604158984481684203516306666",
"104330355696335085432591176660954856193",
"79467008431342530422503140933193392324",
"184777014175417326588209515044825150415",
"176822690269269362743102577490090990134",
"128091612440771493097506275983016441922",
"268771943516782376234590438842762649679",
"244207163849710931442507678953667103177",
"127651586688657613873421983912035690958",
"128892301317008998483722193908247475138",
"269868953478010124940064014241916567054",
"255686479686846835056261766744288567217",
"30123624090349867362746997721106746812",
"320119802965451767882450817133990298244",
"330552352618278117376611689234014617515",
"124767709541004994827117805561369686695",
"327849974655106398457073818963514309644",
"232770925656593694702535789460178335421",
"121926504179787243869632100220920292447",
"65784413074703852019902690369177468853",
"257033615836102425497383102943309044260",
"273016957322532321809597124576960259512",
"160195489047638132733388552469768451220"
],
"threshold": 0.9
},
"id": "CVE-2026-113604-73750353",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "173865584661815975088022966795765389909",
"length": 745
},
"id": "CVE-2026-113604-79657605",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "parseDynamicStringTable"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"44761700716442373898984997486769626498",
"83251576582027057542056005538258368955",
"304923890434777178357845710231190332919",
"163931747646580134747765825601274284399",
"235966938608200286435646141009223856862"
],
"threshold": 0.9
},
"id": "CVE-2026-113604-7f745e93",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Processors/MIPS/src/main/java/ghidra/app/util/bin/format/elf/relocation/MIPS_Elf64Relocation.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "162335800453775548503270459351086896506",
"length": 851
},
"id": "CVE-2026-113604-8aea8f2b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java",
"function": "processSymbolTables"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "7247472171157040900105406337552271580",
"length": 288
},
"id": "CVE-2026-113604-914db27d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java",
"function": "parseStandardRelocations"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "238453134538040413912246529805480229133",
"length": 124
},
"id": "CVE-2026-113604-9757908c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfProgramHeader.java",
"function": "isInvalidOffset"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "116306039842376991886155315948589030701",
"length": 1693
},
"id": "CVE-2026-113604-a953ad5c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java",
"function": "markupSectionHeaders"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"116276261650087811334078344823905250803",
"148594762069750173077738062223173131026",
"249718028773216858987967938177382020747",
"306632234206451738256983995839068477764",
"8955078153164822247246050028396407097",
"107987886035618395544906660218589041981",
"27902459804080328133811778906646515450",
"219303945338134353943480841882701917521",
"305656390887891539277135576923471486551",
"277822287734121087595566508207302595815",
"137451108168041848371802004609760478530",
"93912339782642083303619051659730414495",
"125961243175841765364322062016200860694",
"14869592311565017343496354855068121686",
"247098059786342652687734339009902753490",
"91121894081954405283415355747585745860",
"320854984063618097473059609363360165386",
"90705590849442418912090913264345472002",
"173271273948101595471043218142301253007",
"171368802224220675413091231514938818243",
"269991031479782880866352332005019223780",
"50557416256412247069728293131104942373",
"169523683842891010449541218802587840957",
"57362146035041110955876964472000941481",
"99560740104531249794377167504024643908",
"282408455437115871087848580342225131284",
"307307769207422558777493972083271083711"
],
"threshold": 0.9
},
"id": "CVE-2026-113604-ab355239",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocation.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "210834743299603087245269976901461994091",
"length": 1902
},
"id": "CVE-2026-113604-be780a69",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java",
"function": "parseAndroidRelocations"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "1906846185460285588682277936472873762",
"length": 351
},
"id": "CVE-2026-113604-c0f55351",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocation.java",
"function": "readEntryData"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "287932789956305966021479064956200844994",
"length": 123
},
"id": "CVE-2026-113604-c3ad4550",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java",
"function": "readNextRelrEntry"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "234532645650253498580949499150990686811",
"length": 574
},
"id": "CVE-2026-113604-cd673a76",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Processors/MIPS/src/main/java/ghidra/app/util/bin/format/elf/relocation/MIPS_Elf64Relocation.java",
"function": "initElfRelocation"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "219032936766174789583627496921422629370",
"length": 1650
},
"id": "CVE-2026-113604-cda69ef4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java",
"function": "markupProgramHeaders"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"223909903941672162730957698157167615735",
"166353931983820382333126187238588407533",
"250883179607015455307305660123500138093",
"171567961548903753310299633429097687652"
],
"threshold": 0.9
},
"id": "CVE-2026-113604-d36efd6a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbol.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "173546987187867589348488903467052154264",
"length": 1017
},
"id": "CVE-2026-113604-dbb9951a",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "parseDynamicTable"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "3081073668084952144335199333340213258",
"length": 725
},
"id": "CVE-2026-113604-ddd7c8b9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "parseProgramHeaders"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "170089419948767148266378968507734689588",
"length": 913
},
"id": "CVE-2026-113604-e238406c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbol.java",
"function": "ElfSymbol"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "260100218790988753869624131784864295654",
"length": 385
},
"id": "CVE-2026-113604-e5a7cdcd",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java",
"function": "parseRelrRelocations"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"45700985836668605634716653524802429529",
"105589839723670796611664329574570257223",
"143257242833394439415466179571755212358",
"47154492364339176245139680637210331818",
"54816961898673143850886657454451804420",
"84682864500745075187209364890361390503",
"84643382713731688473384301046912861681",
"159919033425707240320443723595732674969",
"11706078050879922892026857646318568572",
"283229902839346572202861014099280514589",
"81776479086545196628312010327050706280",
"54282474226481603069658593148917772845",
"110434654075910737441818397916992915024",
"121908280758510320474335361897702873387",
"278135959475257759754429408858818273154",
"57953858591053109924921823046500620336",
"102460537290498666560972635037287176845",
"128734235867860372050911298218026924001",
"231006592519701976433512202255380724334",
"118570803377584352225968845867435611151",
"45509848110747957366776870553230052999",
"176931985543633133380494232616363393442",
"321715780215785307285103465067791923687",
"224791671955451079444368935455353591750",
"272297991396446237187821240778493929867",
"65200583463638093072262816801879504956",
"304331379692414854873475006694062409117",
"239148027593586126080940445662526737423",
"65671637615312765722477478520596657050",
"13279232492184569369757185252015988896",
"243734034695976056325676587335762492647",
"185785972091550048858121069819005783576",
"295411466730785594196487734101057147238",
"123207072327663030373471565182972783090",
"96723623108006360668376369635978763910",
"179605978076728583139898742690585872836",
"64669628988617373721669994927015088955",
"122312332163907816290201962688584224895",
"120096451872046595913823966922719611057",
"112818475348557803693368614609777310940",
"75975206575605303888151911579768267973",
"51820538802191544886535031007888225133",
"16558263660213968101852438783445559644",
"197021846461332396848172674962071179807",
"317929416921450629873137819478262732926",
"200317106897923998143596164347778500640",
"252181313254303596306044775935972729170",
"10218837044441185640154183547120895231",
"3146159397385546553317751166088114303",
"148541441170708298042823878633951473398",
"244727567984161000652944691521910288737",
"282977082559345765552120942714408204421",
"317998393788190571206875241815092556885",
"300216196563779722746469214280933925381",
"331155968115473921913359989699558108283",
"158047439318628423323143041555936977043",
"51329979135914656317204800530280627743",
"24917958730878356922807201177608274462",
"259901235453429229177659253945365336904",
"118688307594972647520075232437520505531",
"234648380617917666165940080992178896063",
"140862835391173134999294604187698542927",
"194531681610730333187153776481471196485",
"125035605487183544668766158082422074015",
"215228093847799763240617908564231170735",
"71064009666317310333334556142295591944",
"15322304096878404293841355379100169305",
"171219509660403827069434163501045596109",
"337227806885883904115801762942891744288",
"309071728170004171309021951979755416430",
"328639076760813675043994685347313613438",
"58908728038216145356052201277968436852",
"188169833186497716165390225748131228820",
"106319846579528952680086099816750104193",
"135975703995704325966641954243754041179",
"62023232204635525291310839461721276059",
"193570839666352866630244225505617974821",
"313015748382271738198111260445363298267",
"20646167925986952805449636371193419113",
"23373383106401092518608823724021578559",
"124558665347220083714414054602678137704",
"307839933687115234257529658957427990879",
"86048087796238804075769311178150127115",
"236959743197353114175397229777271764122",
"5279796874353107786106895122076837568"
],
"threshold": 0.9
},
"id": "CVE-2026-113604-e7424c7a",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "256938940938393682218517544318765071625",
"length": 223
},
"id": "CVE-2026-113604-ea8754d1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocation.java",
"function": "createElfRelocation"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "149324661686917486104321840554088144109",
"length": 2092
},
"id": "CVE-2026-113604-ee1ac0ee",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "parseSectionBasedRelocationTable"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "321442879232492824505702492395845224484",
"length": 949
},
"id": "CVE-2026-113604-f08d7f70",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbolTable.java",
"function": "toDataType"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "203009065104550337325595470872332757475",
"length": 60
},
"id": "CVE-2026-113604-f2c106fb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfProgramHeader.java",
"function": "setOffset"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "95689597050517296382708063838131713883",
"length": 2020
},
"id": "CVE-2026-113604-fe01dad1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3",
"target": {
"file": "Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java",
"function": "ElfHeader"
}
}
]
vanir_signatures_modified
"2026-10-21T09:40:59Z"