Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:46:57 +0000 CVE-2026-49497 — Ghidra < 12.1 - Path Traversal via .gnu_debuglink in DWARF External Debug File Resolution https://cve.radiocsirt.org/vuln/cve-2026-49497 <p><strong>Affected:</strong> nationalsecurityagency ghidra</p> <p>Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. Attackers can craft malicious ELF binaries with traversal sequences to probe filesystem existence and leak CRC32 hashes of arbitrary files during automatic DWARF analysis.</p> <p><strong>Affected:</strong> nationalsecurityagency ghidra</p> <p>Ghidra before 12.1 contains a path traversal vulnerability in SameDirDebugInfoProvider that fails to validate filenames from ELF binary .gnu_debuglink sections before constructing file paths. Attackers can craft malicious ELF binaries with traversal sequences to probe filesystem existence and leak CRC32 hashes of arbitrary files during automatic DWARF analysis.</p> https://cve.radiocsirt.org/vuln/cve-2026-49497