Is CVE-2026-116012 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116012?

CVE-2026-116012 has a CVSS v3 severity of LOW (3.6).

Back

CVE-2026-116012

Description

Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bit variables. Attackers can supply a crafted packed stream, such as a malicious .sla file, to inject attributes into the decompiler's input or crash the decompiler process.