Threats Tagged 'ghsa-m3q7-8jjf-cmcw'

Ghidra versions up to 12.1.4 have a stack-based out-of-bounds write vulnerability in the decompiler's leftshift128 function. This occurs when processing negative shift amounts from p-code, allowing crafted binaries to trigger memory corruption during decompilation. The vulnerability has a high severity rating with a CVSS score of 7.3.