CVE-2026-52759 | BDVDB-2026-339608 Detail

Description#

Ghidra before 12.1.1 contains an uncontrolled memory allocation vulnerability in the Mach-O binary parser that allows attackers to cause denial of service. An attacker can supply a crafted Mach-O binary with an arbitrarily large ncmds load command count value, forcing the parser to allocate excessive heap memory without validating file size, crashing the Ghidra JVM.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-10Record published in the CVE List.
2. Version 22026-09-24Most recent update recorded in the CVE List.