CVE-2024-58350
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiting the unsafe destruction order that causes iteration over deallocated memory.
Scoring
- Severity
- LOW
- CVSS base score
- 2.9
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- EPSS probability
- 0.11%
- CWE
- CWE-758
- Published
- 2026-06-10
- Last modified
- 2026-07-14
Affected products
- nationalsecurityagency ghidra
- nationalsecurityagency ghidra
Weakness type
Related vulnerabilities
- CVE-2026-16441 — Eclipse OpenJ9 : Method resolution default method precedence failure
- CVE-2026-50185 — RustCrypto Cmov/CmovEq on aarch64 can produce wrong results if high-bits of registers are set
- CVE-2026-40279 — BACnet Stack: Undefined-behavior signed left shift in `decode_signed32()`
- CVE-2026-34549 — iccDEV: UB at IccUtil.cpp
- CVE-2026-34547 — iccDEV: UB at IccUtil.cpp
- CVE-2026-34537 — iccDEV: UB in CIccOpDefEnvVar::Exec()
- CVE-2026-34533 — iccDEV: UB in CIccCalculatorFunc::ApplySequence()
- CVE-2026-28528 — BlueKitchen BTstack < 1.8.1 AVRCP Browsing Target GET_FOLDER_ITEMS Handler OOB Read / Undefined Behavior