Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiting the unsafe destruction order that causes iteration over deallocated memory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2024-58350 Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translator… https://www.cve.org/CVERecord?id=CVE-2024-58350
Post summary
Ghidra versions prior to 11.2 have a use-after-free vulnerability in the Sleigh backend due to static initialization order issues (CVE-2024-58350).
CVE-2024-58350 Use After Free Vulnerability in Ghidra Before 11.2 Sleigh Backend https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-58350 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The message alerts that CVE‑2024‑58350 is a use‑after‑free flaw in Ghidra’s Sleigh Backend pre‑11.2, with links to vulnerability detail and notification pages.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nsa | ghidra | - | - | - |