Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vulnerability by crafting a binary that causes stale pointers in the HighIntersectTest::highedgemap cache to be dereferenced, reading and writing the flags field of freed heap memory when a user opens the binary in Ghidra's decompiler view.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-52757 Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can tri… https://www.cve.org/CVERecord?id=CVE-2026-52757
Post summary
The excerpt reports a heap-use-after-free vulnerability in Ghidra before 12.1, providing technical details but no PoC, exploit, or mitigation.
CVE-2026-52757 Heap-Use-After-Free in Ghidra Decompiler HighVariable Merge Function Before 12.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-52757
Post summary
A brief disclosure identifies a Heap‑Use‑After‑Free flaw in Ghidra Decompiler before version 12.1, without evidence of exploitation, patch, or PoC.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nsa | ghidra | - | - | - |