Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. Attackers can craft malicious ELF binaries with traversal sequences to probe filesystem existence and leak CRC32 hashes of arbitrary files during automatic DWARF analysis.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-49497 Path Traversal in Ghidra Before 12.1 SameDirDebugInfoProvider ELF Processing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-49497
Post summary
The text announces a path‑traversal vulnerability affecting Ghidra versions prior to 12.1 in its ELF processing component, without mentioning any PoC, exploit, or patch.
CVE-2026-49497 Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before… https://www.cve.org/CVERecord?id=CVE-2026-49497
Post summary
The tweet announces CVE-2026-49497, detailing a path traversal vulnerability in Ghidra’s SameDirDebugInfoProvider related to unvalidated ELF .gnu_debuglink filenames, with no mention of exploits, patches, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nsa | ghidra | - | - | - |