CVE-2026-52759Disclosure(nsa / ghidra)

LOWCVSS 6.7 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause denial of service. An attacker can supply a crafted Mach-O binary with an arbitrarily large ncmds load command count value, forcing the parser to allocate excessive heap memory without validating file size, crashing the Ghidra JVM.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-789

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ghidra

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
ghidra

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-10: 2Technical Details · 2026-06-10: 206-10
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-52759 Uncontrolled Memory Allocation in Ghidra Mach-O Binary Parser Before 12.1.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-52759

    Post summary

    This post reports CVE‑2026‑52759 as an uncontrolled memory allocation issue in Ghidra’s Mach‑O parser, but it provides no PoC, exploit code, patch details, or evidence of active exploitation.

    0000031
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-52759 Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause denial of service. An attacke… https://www.cve.org/CVERecord?id=CVE-2026-52759

    Post summary

    The text announces a denial‑of‑service flaw in Ghidra’s Mach‑O parser caused by uncontrolled memory allocation.

    00000135
    57.6K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appnsaghidra---

Explore more