PT-2026-48417 · Ghidra · Ghidra

Published 2026-06-10 · Updated 2026-06-10 · CVE-2026-52757

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Ghidra versions prior to 12.1

Description A heap-use-after-free issue exists in the decompiler's HighVariable::merge() function during the variable merging pass. This occurs when a user opens a specially crafted binary in the decompiler view, causing stale pointers in the HighIntersectTest::highedgemap cache to be dereferenced. This allows for reading and writing the flags field of freed heap memory.

Recommendations Update to version 12.1 or later.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-52757

Affected Products

Ghidra

References · 4

• 🔥 https://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-8jqp-qv73-395r · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-52757 · Security Note
• https://twitter.com/CVEnew/status/2064709806665994344 · Twitter Post
• https://vulncheck.com/advisories/ghidra-heap-use-after-free-in-highvariable-merge-during-decompilation · Note