Beveiligingsadvies

CVE-2026-49497

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-10 12:37:59

Laatst bijgewerkt 2026-07-14 21:33:25

Toegewezen door VulnCheck

CVSS-score 4.6

Status PUBLISHED

Beschrijving

Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. Attackers can craft malicious ELF binaries with traversal sequences to probe filesystem existence and leak CRC32 hashes of arbitrary files during automatic DWARF analysis.

← Alle CVE's bekijken Bekijk op cve.org ↗