CVE-2026-52757
Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable mergi
CVSS
4.4
Medium
EPSS
0.1%
p4
KEV
—
Exploit Today
1
0-100
Published: Jun 10, 2026 · Last modified: Jul 14, 2026 · CWE-416
0.1%EPSS · 30 days0.1%
2026-08-062026-09-02
Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vulnerability by crafting a binary that causes stale pointers in the HighIntersectTest::highedgemap cache to be dereferenced, reading and writing the flags field of freed heap memory when a user opens the binary in Ghidra's decompiler view.
- github.comhttps://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-8jqp-qv73-395r
- www.vulncheck.comhttps://www.vulncheck.com/advisories/ghidra-heap-use-after-free-in-highvariable-merge-during-decompilation
- github.comhttps://github.com/NationalSecurityAgency/ghidra/security/advisories/GHSA-8jqp-qv73-395r
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-843539.6 CRI19.8%
——6Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)2dCVE-2026-843529.6 CRI19.8%
——6Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)2dCVE-2026-843508.8 HIG10.6%
——3Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Low)2dCVE-2026-843498.3 HIG13.7%
——4Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)2dCVE-2026-843478.8 HIG20.3%
——6Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)2dCVE-2026-843339.6 CRI16.1%
——5Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)2d