HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-100504 — Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnera...

·Source: NIST NVD

Updated:

Executive Summary

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled, corrupting memory and potentially achieving code execution.

Analysis

Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function when processing negative shift amounts from p-code. Attackers can craft malicious binaries with specific instruction sequences that trigger the overflow when decompiled, corrupting memory and potentially achieving code execution. CVSS Score: 7. Published: 2026-09-26T01:17:00.043.

Indicators of Compromise (1)

CVE (1)
CVE-2026-100504
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 26, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-101081 — A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability ...

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-101081
NIST NVD
MEDIUMVulnerability

New Mexico jury finds Meta deceived consumers about data privacy practices

A New Mexico jury found Facebook violated the law nearly 44 million times by lying to consumers about its data privacy practices.

The Record
MEDIUMVulnerability

Hogan Lovells Cadwalader hacked by Silent Ransom Group; re-attacked after they wouldn’t pay

Numerous major law firms have fallen prey to the Silent Ransom Group this year. Now DataBreaches provides exclusive details on SRG’s recent attacks on Hogan Lovells Cadwalader. Yes, that’s “attacks,” plural. When New York City’s oldest law firm, Cadwalader, Wickersham & Taft, merged with Hogan Lovells in 2022, it combined two powerhouse firms. Yet despite... Sourc

DataBreaches.net