CVE-2026-52753CWE-789

Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol

Medium · published June 10, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allocates unbounded output buffers without size limits. Attackers can craft malicious Rust symbol names in binaries to trigger exponential memory allocation, causing process crashes during binary analysis.

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00161 · 4.9th percentile
Weakness
CWE-789 · Memory Allocation with Excessive Size Value
Published
2026-06-10T12:40Z
EPSS history
Timeline
  • 10 JUN 12:40Z
    Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol
    cvelistv5