CVE-2026-96273

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-96273
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-96273.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-96273
Aliases
  • GHSA-4w7g-wmg8-fgv5
Published
2026-09-23T00:29:51Z
Modified
2026-09-24T08:22:25Z
Severity
  • 6.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Ghidra before 12.1.4 Denial of Service via Crafted Database
Details

Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and prevents resource cleanup or graceful shutdown.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-460"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/96xxx/CVE-2026-96273.json"
}
References

Affected packages

Git / github.com/nationalsecurityagency/ghidra

Affected ranges

Type
GIT
Repo
https://github.com/nationalsecurityagency/ghidra
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
8b6bbb857accdfa20dc5b2f5dea471178c2e9fbc
Fixed
594da048431aab082a9da7c4a965874d07d33310
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "12.1.4"
        }
    ],
    "source":  [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

Ghidra_10.*
Ghidra_10.3_build
Ghidra_12.*
Ghidra_12.1.1_build
Ghidra_12.1.2_build
Ghidra_12.1.3_build
Ghidra_12.1_build
Ghidra_9.*
Ghidra_9.0.1_build

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-96273.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "76656274582494393066633031918453079126",
            "length":  379
        },
        "id":  "CVE-2026-96273-52cea423",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/nationalsecurityagency/ghidra/commit/594da048431aab082a9da7c4a965874d07d33310",
        "target":  {
            "file":  "Ghidra/Framework/Project/src/main/java/ghidra/framework/data/AbstractTransactionManager.java",
            "function":  "lock"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "216954183528104908322666672069031836233",
                "29706963685332666125221940383260300350",
                "23727198017952646751105623399842155228",
                "127759179660613257914624996558607578088",
                "19020274097076423453233411073393939061",
                "293877968354729625880547343886738193644",
                "135855523028479529027807956654038281011",
                "201813785989310512801353197422550506197",
                "63023319149774050960125992398873200987",
                "6288026863366287526843984215735602815",
                "44616024160398931099225225592030953395",
                "149118973125726420662233884224122862855",
                "72308611977441965591524060756439334783",
                "100089768951837119817567505613427161222"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-96273-df6fb648",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/nationalsecurityagency/ghidra/commit/594da048431aab082a9da7c4a965874d07d33310",
        "target":  {
            "file":  "Ghidra/Framework/Project/src/main/java/ghidra/framework/data/AbstractTransactionManager.java"
        }
    }
]
vanir_signatures_modified 
"2026-09-24T08:22:25Z"