CVE-2024-58350
LowCVSS 2.9Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Ghidra before version 11.2 contains a use-after-free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiting the unsafe destruction order that causes iteration over deallocated memory.
Risk Assessment
The risk is the potential for a DoS (denial of service) attack by intentionally causing Ghidra to crash during shutdown, which can disrupt the analysis environment and lead to loss of unsaved data.
Recommendation
It is recommended to immediately upgrade Ghidra to version 11.2 or later, which includes a fix that resolves the initialization and destruction order issue.
Original NVD description (English source)
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiting the unsafe destruction order that causes iteration over deallocated memory.