Nsa Ghidra vulnerabilities

CVE-2026-52757 [MEDIUM] CWE-416 CVE-2026-52757: Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::me Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vulnerability by crafting a binary that causes stale pointers in the HighIntersectTest::highedgemap cache to be dereferenced, reading and writing the flags field of freed heap

CVE-2024-58350 [MEDIUM] CWE-758 CVE-2024-58350: Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiting the unsafe destruction order that causes iteration