CyberRota Analysis
AI-GeneratedGhidra versions prior to 12.1.3 are vulnerable to an uncontrolled resource consumption issue in the PDB parser, allowing attackers to crash the application by providing a specially crafted PDB file with oversized parameters. This vulnerability can lead to uncontrolled heap growth, resulting in an OutOfMemoryError that disrupts the application's operation. Organizations using Ghidra for software reverse engineering should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters into an unbounded list, causing uncontrolled heap growth that triggers an OutOfMemoryError which bypasses exception handling and crashes the application.