CVE-2026-52753: Memory Allocation with Excessive Size Value in nationalsecurityagency ghidra
Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allocates unbounded output buffers without size limits. Attackers can craft malicious Rust symbol names in binaries to trigger exponential memory allocation, causing process crashes during binary analysis.
AI Analysis
Technical Summary
CVE-2026-52753 is an out-of-memory vulnerability in the rust_demangle function of Ghidra before version 12.0.3. The function allocates output buffers without enforcing size limits, enabling attackers to craft malicious Rust symbol names that cause exponential memory allocation. This can lead to process crashes when analyzing binaries containing such symbols. No official remediation or patch is explicitly stated in the available data.
Potential Impact
The vulnerability can cause denial of service by crashing the Ghidra process during binary analysis due to excessive memory allocation. There is no indication of privilege escalation or code execution. The impact is limited to process stability and availability during analysis.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when analyzing binaries with untrusted or suspicious Rust symbol names to avoid triggering the vulnerability.
CVE-2026-52753: Memory Allocation with Excessive Size Value in nationalsecurityagency ghidra
Description
Ghidra before 12.0.3 contains an out-of-memory vulnerability in the rust_demangle function that allocates unbounded output buffers without size limits. Attackers can craft malicious Rust symbol names in binaries to trigger exponential memory allocation, causing process crashes during binary analysis.
CVSS v4.0
Score 6.7medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-52753 is an out-of-memory vulnerability in the rust_demangle function of Ghidra before version 12.0.3. The function allocates output buffers without enforcing size limits, enabling attackers to craft malicious Rust symbol names that cause exponential memory allocation. This can lead to process crashes when analyzing binaries containing such symbols. No official remediation or patch is explicitly stated in the available data.
Potential Impact
The vulnerability can cause denial of service by crashing the Ghidra process during binary analysis due to excessive memory allocation. There is no indication of privilege escalation or code execution. The impact is limited to process stability and availability during analysis.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when analyzing binaries with untrusted or suspicious Rust symbol names to avoid triggering the vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-06-08T15:20:09.274Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a2967aec9170919df1fd7c8
Added to database: 06/10/2026, 13:33:34 UTC
Last enriched: 07/15/2026, 10:10:04 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 145
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.