{"id":"CVE-2026-113604","summary":"Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts","details":"Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program header counts. Attackers can supply a crafted 128-byte ELF file that triggers an OutOfMemoryError during load-spec discovery at import or in headless analysis pipelines.","modified":"2026-10-21T09:40:59.325783819Z","published":"2026-10-20T15:40:31.409Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/113xxx/CVE-2026-113604.json","cna_assigner":"VulnCheck","cwe_ids":["CWE-789"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/113xxx/CVE-2026-113604.json"},{"type":"PACKAGE","url":"https://github.com/NationalSecurityAgency/ghidra"},{"type":"ARTICLE","url":"https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_12.1.4_build/Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java"},{"type":"FIX","url":"https://github.com/NationalSecurityAgency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113604"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/ghidra-10.2-through-12.1.4-denial-of-service-via-elf-loader-extended-header-counts"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/nationalsecurityagency/ghidra","events":[{"introduced":"17884b878680e640dd5c30210736a1d062ae5ba2"},{"last_affected":"8b6bbb857accdfa20dc5b2f5dea471178c2e9fbc"},{"fixed":"6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3"}],"database_specific":{"extracted_events":[{"strategy":"StandardRange","range":[{"introduced":"10.2"},{"last_affected":"12.1.4"}],"source":"AFFECTED_FIELD"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3"}]}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-113604.json","vanir_signatures":[{"id":"CVE-2026-113604-037ba51a","signature_type":"Line","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSectionHeader.java"},"deprecated":false,"digest":{"line_hashes":["266463501116079032407047283581504074164","23604789503223856181064447380471921468","261834206876004618325738072948528460920","3098498804690671826361332288468488417","273226393926816781240942680363441701650","315910367409212291674874443764517876172","107821876492592864122540261151179032095","56272765740900120366137522864650923800","328871236147241558783898025470411781771","212088377063532344346954203932047773545","152715179379436372120007674592810007023","241780431670299660374738163441155921749","70770769755931717379699312497715658304","323966911518387660824257976342450076793"],"threshold":0.9}},{"target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"parseSectionHeaders"},"deprecated":false,"digest":{"function_hash":"184888346885683476124911300543496181696","length":934},"id":"CVE-2026-113604-0a3f7ad7","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3"},{"target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"parseStringTables"},"deprecated":false,"digest":{"length":997,"function_hash":"338157324299850077640150688527794215038"},"id":"CVE-2026-113604-1496726d","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3"},{"id":"CVE-2026-113604-167320e6","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"function":"initElfRelocation","file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocation.java"},"deprecated":false,"digest":{"length":241,"function_hash":"20589727237317599023150020848842811951"}},{"target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java","function":"toDataType"},"deprecated":false,"digest":{"length":501,"function_hash":"5597680205343721055085354784253595316"},"id":"CVE-2026-113604-1ecc3ec6","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3"},{"source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSectionHeader.java","function":"isInvalidOffset"},"deprecated":false,"digest":{"function_hash":"230950270738365236378755662779455034021","length":126},"id":"CVE-2026-113604-20be57d6","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfProgramHeader.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["160799448646761841321108586938697992892","257859043565929786482905924471446177029","115197045054490279622674725440995144768","240261324399050574995584717144783760030","189560242523335893233261781700446863955","50884444045104463017552945962270779047","42305750297792846471727295904791740205","91301653205400491970752419834808500692","289471496635273242203896057005595848391","259059840379680777339163545987939850012","309600908261126684501178226896276121465","96286714995199158446725048894626371475","144999025948302278048894028641887374291","119532642046150485421912946217211724410","69082077122744775672364584633444176892","8467428953625412482138985282960652116","130745311436670342820508435318906374982","236488972809144271099919496014472908392","142080509790131794796878277614012209510"]},"id":"CVE-2026-113604-26c3048c","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"parseSymbolTables"},"deprecated":false,"digest":{"function_hash":"25333472908424105411970427426547214260","length":1648},"id":"CVE-2026-113604-27a3f774","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-113604-2938ceb6","signature_type":"Line","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbolTable.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["45700985836668605634716653524802429529","52379134798764475220562776427348342415","181880005010250030640133839614027927666","143185825286655792415204204382605294551","88341991522107028281821310558969420221","191139332629149481892751090926006108839","174645466563865452359368279799167934794","81778179565589805735722239780000398094","195394777271107567359560308185824637969","99989916458385252763038405190038229020","192478254325907189754554350646860065142","53084702465741322890043941519617373025","81702936153200596531127642132282939803","174122778280557274176106080274299025413","146805994822306762150500941064246779942","112182589001632545957822858984443852644","150143007010698418471772902646622800929","327699947639365649832827837884366957856","148400290348983666398685701224425385804","293311536831342695151255217854210082327","267689783534771914532312927519781786691","284218035459929488203845769688643515816","289805856932878448287357128760488462385","285484629389661486134287068739630231456","66734614267959036147846888663524635316","77555060797197684088447780820302910236","254883875128748161940478108404324411933","315468659595715132497835724142821015969","333602252381679354601730940889648536996","133567174190553354390638268516491919943","97782100708022274810892593273659718254","273732198685242247944136445064928358659","220175369512818671638387937207797929306","231137294142290439186375495049421542550","96539469115173699040486635839177825353","116081647191435721129463925911065805968","178079749528195608894094306470609175281","126057592133215714246037710409792616341","162624658529252795844698414006492708465","2591499180242566075776329035761854623","166588640184985584851134796274778143069","283795083732329032497417857038178429691","185613619834754962000692691679158909803","51239867179323761802637104809844290187","242439857239907574683918672149524082365","67065307240398186090149508499495575940","228910510876170306786295763705366803527","140143618190650222123097766559152846996","283458621944868228410440055591749036214","229737761083430263976206590973724960540","245056600429910012820180291772065329418","242466767450400752632205207519267454945","160092006385595157204725187624370978075"]}},{"digest":{"function_hash":"206966479898454826464048104885427505031","length":876},"id":"CVE-2026-113604-2a184d62","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"getExtendedSymbolSectionIndexTable"},"deprecated":false},{"source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["26322461443968300454935233374507225972","50458147196927274463830564253094913498","238003646748019654830221350181778008621","152477443369215751694240393321729191244","146336766187641319402125911657911645771","281481868870642899134565912959838925618","291138917605531370158369499507087247945","300532859812303187468669796263733428707","28832577174174350543989219388927277296","271538109393910279224466970308531001882","130322661610799959899770634200207992776","265615425293801849084635914651902930070","167475131740418073733621755328770818138","29318126791310204917371075430665165921","191291943564661702978567822632174151952","21393868712426657651315777018460868762","244548321362637146259194954954074887222","149594461356207090816391861403176208088","220671705822558681940268845422034499818","256533067486332975636296389703122330378","100876055096318154149763009752907153207","20740318767635672542942130853872515973","140254358578533499935183656875007131096","141235595762375609980455947821892132861","134231486222608976427214368965762848883","231275441372330411473672435584334181459","242428107309222440284357648889375155042","125228060172174141874022491557041554562","165543724407486548668893955919468356153","20624802056249211707729559369141494604","288070264587704842195391190327131897605","41168058172220245852256407756393098179","111415678861286473336021940737401238353","137890123797976293766400656158909928108","228713234972488281868961020015315052887","7674804187531683687595052063357989120","216235756097835483199772986017714972650","71039812054852594239963875391561907831","67522699492079348981324482699706489611","239166952144741221827280679594821019346","277800820738616731539329167665244415489","255190887175567717936313752054538342207","280762993476611039976038375733356815592","256450800273856637349044336178611485345","159404558454291141222292532456398328385","57307767808912400321863531167361002885","327020219541417503866949791172228231594","151982825999093916565604243613155085506","155290556777067955038535790678061425552","325144942686946996118264605298487278191","184458543241649636210692161165495304039","28025963907194910065643742829869691608","82531849949288399490785617910708578036","34098584633132121692645992918911816094","252844245908840001675574264530574429321","322544269756185298711636936432979180899","56768740404508753983546267305545951940","6105096454234521568660816475389919669","261519814977253012494445693627266738762","158547301294174488149966542989349137861","53298007833426513692045460554399278229","114585098681862124354142085274765046052","255858336392690983454157025923897001135","94808306833186060608211424476788682423","253144331469910013474975812322609681186","182578686445322762342666521235268193711","149218643911672539893663020155641243550","76778682953815709625160589365527627392","206793492496970487284321350257486880825","288417599293080020409954457399897881283","293848618285347393933029928343707163476","28620621551159047380891727469684582012","159577782571961767154353908609192835033","294896430035057684706258723615032639030","254846713410989423286539405170752373","71775150548633531188473215195408092943","270320454446964135165794247342827910418","139824293151429566075823545252041494261","37030188191216425710404870852306570320","258285220913919381694503336947399508281","83521844761355867259469901085547538356","159274234510317495762995871693939464289","339549377392944755258602930187974900307","50549606692257342053024916333682040356","94678084346442182427554193751241317685","158087595749499179254627204822195122194","288338607497121051497351690191363689004","25142606626366902864674693592294664915","311381684354110120573096991923152717041","92385932645465150297925375522967909606","309053610371434334017290696850745406241","222701053826163937693739520844858609072","280446762730807212531955526793105837357","125539324459236046603805532097172949808","630069987864109805061934376247076958","197840200991203848490747130766535069229","68167005074915944055664770603375601185","55099769786169440677122206539241927377","274842708763159131090993546672619640633","30795016247007061408736394829113568667","155659498025382428719588972930124461806","311293104479742574418442754345080777462","105546757818263613636062347334861903813","179946989217220800741048732512033504510","89948388366010929228041389836928005478","246361576890557166089045061957083731450","82582169604489684545274391717685464054","150172633658613461310258829415240644301","32253885883745446217210286193926612989","335935754125990016415963234977506958422","319015440129860600982309727206655706762","100872729265646288253375507022259801051","190616624257443468974687398822176082565","99947368340444220046456276351572722143","304506852066464571188256121696414400327","228823175882398139860673790904148462873","32358939567037357782123834938415000892","121100054619428150278100213643837829526","172947504025903645318898335301722311753","24644791839909733740407903324132607487","117599700475036315385646320697967144547","264187463666485673448794063688386627430","263291048868359393012058269637201393184","197700457356190964001436257748003844937","217984751851690449038684158324307164134","309772746597837758629959823945776920931","337368142265489089994846277901033264716","300775191914894234031812763825217280368","279338152439801411415286023274196471949","210251798487935609077704160601435720892","150805095796375212294291878687705979357","216657935790793839468163902974176836138","254221333186361634902320415387239283347","237581620805084799472894064054219484092","314265434588492302207206283879850681911","282559686728438191516947714543283545743","91959004706038894330683507017452528179","256848845733570637033615458215732289738","173103958669505793911691036997251549288","172475545501231387498222073998666218388","313757098422541634507235002145223229703","235092636740193138869989947614992197656","121135647835780024182099076934741177753","182962389557860457931653629244709594432","165499168066834542585854869703963519276","88278804340562738483104690761604021410","261397934188246779399457342546338699481","68874456145415627186016392077993008495","266111047254797248851009424332577818993","93163382740226049263204062636381157297","310094089939080135306293851803178737569","245693562102011134927364626275242078120","195525013563981632578925784325171546498","46401204009473672656885404581732410421","280892791319052292225861612468144984337","129675571072015338507564445586638345446","321923777168003411672819558629283133049","299010995422806138167204382707317741223","259296065675656548831425873302408235422","320102978424854130818606710265629439949","103906399243175593507446308085244392050","131390439096429843103310498992246802880","265592362266766965734134269165345213451","256951561896026960175846496678033272782","12577406374924783045807667274878741554","11478005336426541511174637012994635600","96320296234960914066050158603218283806","54475242090743982856495869619102412157","234454727566504621566460831461678330571","212882808972008059516406943364719240832","228351925788121947097051473158503272496","115777621621926952613243330886297944308","324020867849350877210489482904030190161","38019762666646322763005162227869807057","57804444290124576135043622025148384856","291354445585766996361309206379917650361","148610333866010335375419505374998470613","281654969932352960935228883497356857240","21774389800321834837254764154349218636","280410489935213288578070481939867074175","278102129941081022831750248727667587325","205665057531941742695289210128070167621","188061480080510023651779086403494780159","60703559471117446943740383958829790930","297272853407162732276297527253366750622","298427727674888502803012291952801934610","23720088117629582101413455149607187198","40107101930012699203261607604899154377","87549611131741355035720863474293624213","90207097601429597011080534409154719474","311870434400740424281220846314563623841","60198179724999182273737177648516962385","99921528321906051617997947253063225532","176126669682681274122854489456472705980","310316707221721442192688894571954478397","72751642115385706806843308007679128659","90876706539460871106967668125505568522","242293729924368964564782654946649452983","270643070524227032700009323936309219637","146021935043336381457664567446702774796","176648004488897995610771265940575222072","289155900821038092066804016257490709298","137475801488105818009460088774874332846","153862728192016913310622639599604899249","187125076194581165493539816495969637509","137886045482749475908104752990857884927","180579871965157227622363852669570560904","110300107287447098899172283568500536413","6915036947106669962795914628568590038","311534551221037058425232612288294850256","221084543986536864115782871556365857555","206851659636757485757545793825494031181","57017683337793456976727975644586149083","38556847380543019702759978498719420706","160218774385155094204542923351986893740","52270672926890766366506683737909003092","162578224020740111692736859608955136662","20320341782173983033699508791978537299","203636904543994229852458425090032958538","11023241078684178785065323100629415442","316563412673081273528767948795823898997","303664741983458462472962725094605192399","102175296230944715208391992529251551971","88516720900129039208838042860211605315","161022023893865059984044023055434932860","20499844034673204987911799878981768743","152045735581554630827288497782017771866","140167287702226247456453576858534686953","272471647665274478489169773421519628156","305792143200584015710262500765222485494","195811553746739335562415312234462328746","267335112783047358363167601109995514019","111971662430372682481634083082011428672","16942263339395097622001951180605856976","258058165897919350839394907887391063212","63715603303222518881863714037513335685","297536669429856822873914688827078207860","38459473706827472655341188093219095887","124828284311700428117615070520644858124","248093751058243943945958062702278366921","190732374908141558333017182924288939364","337361263439645506424221758518141594827","258859661404918457059776135551288652437","194263682389878376556586216596605528015","156804340915509226999803665732963652666","246248951157847349780854409901389827886","26369392080689936052860586914732285863","227174566036256700116914653875153188308","153746561912922622870576596804042288252","324043306179763926888557438218849609440","53609857600438106224034935718318690449","92996960450896936041054777927699801651","219385364579096632954366069615868374824","194372579210819597234527861267093480003","280563962796141116400238309828197906168","292051389261684002985703249285666670317","40499485519268093618287914082021803311","23259174882035016779798289538841192192","330741051464766883367497512998568622390","250658419119276807317416631725153102749","287588581273000907641209045814509990347","121028455885580795511216054825959860070","49591940663061625072696920842185531083","105643459581837580773141557358236493576","180953008475554319054062964695674392533","160163079841361709248443681185421742376","213817560874985399886817591851684116848","257553795963604368220684133082106788414","46929801760242970198169937935047031923"]},"id":"CVE-2026-113604-2a6c7859","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"232252575038778785046283555909876270315","length":847},"id":"CVE-2026-113604-2c1eddd5","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSectionHeader.java","function":"ElfSectionHeader"},"deprecated":false},{"source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java","function":"markupRelocationTable"},"deprecated":false,"digest":{"function_hash":"332556252006247993070361146563642527716","length":382},"id":"CVE-2026-113604-339eae41","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"parseDynamicSymbolTable"},"deprecated":false,"digest":{"function_hash":"229837691181745665600824066512729763399","length":1682},"id":"CVE-2026-113604-39054eff"},{"signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"determineHeaderEndianness"},"deprecated":false,"digest":{"function_hash":"265144939485829760786755298201439666036","length":770},"id":"CVE-2026-113604-3e4993c5","signature_type":"Function"},{"digest":{"function_hash":"102769076118862559942522138174301394963","length":267},"id":"CVE-2026-113604-3e5bdedf","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"readExtendedSectionHeaderCount"},"deprecated":false},{"id":"CVE-2026-113604-440e9aa3","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"function":"ElfProgramHeader","file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfProgramHeader.java"},"deprecated":false,"digest":{"function_hash":"202391854305159522199372294478960949062","length":708}},{"id":"CVE-2026-113604-45158b61","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbolTable.java","function":"ElfSymbolTable"},"deprecated":false,"digest":{"function_hash":"334788376498659579511219369484569006223","length":1011}},{"id":"CVE-2026-113604-46379542","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java","function":"markupSymbolTable"},"deprecated":false,"digest":{"length":566,"function_hash":"226338968918130634708818942160964852234"}},{"digest":{"function_hash":"255975444178419484879673410919696134791","length":229},"id":"CVE-2026-113604-50c5478c","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"getSection0"},"deprecated":false},{"id":"CVE-2026-113604-685d7c69","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"parseDynamicRelocTable"},"deprecated":false,"digest":{"function_hash":"308058044881624479505058090147649927771","length":1180}},{"id":"CVE-2026-113604-6cff2015","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java","function":"ElfRelocationTable"},"deprecated":false,"digest":{"function_hash":"105386827144396614022168161211494172688","length":807}},{"deprecated":false,"digest":{"line_hashes":["110609666138122707732808919148513701487","32600241403041333131469130232667079357","41074538815072878112093617738847293141","154104551528901599307195586043023867562","130619666845231364222482700947566119874","170915766105211453303563358899811289022","269040405647765568013816860756947806231","264569844216836773882940823630871414105","27722247148610699604657350820628200939","308894630782326808841154436803961373244","260298768155561549033365351219380671209","324688772206390227139663011165412770700","84369575181193714778905776598965892766","56018155911953508720966664835759973860","38602212149896474908851127970619690144","208798153521660795478713891693424405032","15617962421132817294838675845630764570","310850620815972925792028004511255709105","30331282138567043478605138448893659570","331612192480382568174644725083486015346","15731441505772412962610859273448322549","202506893436457154556996083030326996828","329518632999790146518714244469776717192","240011720759000896118542516275831964037","279264515950263417252112537860255270006","172114867857237704994289358928214124691","67612816389144695004706868598284563830","213134151667978640425165446901762254156","324688772206390227139663011165412770700","84369575181193714778905776598965892766","93832873703863051330452375729818380170","192664166100071617510024273878248557173","262870169143284048323093061702993158763","268814236104948766789434899724439621897","140741642851534442453436909341038240291","177147752094995554469067189101638374557","74760748336035490407831804574648268292","208831564784458256772047313355734299936","162014050011531871142597308474360531247","71511243278604158984481684203516306666","104330355696335085432591176660954856193","79467008431342530422503140933193392324","184777014175417326588209515044825150415","176822690269269362743102577490090990134","128091612440771493097506275983016441922","268771943516782376234590438842762649679","244207163849710931442507678953667103177","127651586688657613873421983912035690958","128892301317008998483722193908247475138","269868953478010124940064014241916567054","255686479686846835056261766744288567217","30123624090349867362746997721106746812","320119802965451767882450817133990298244","330552352618278117376611689234014617515","124767709541004994827117805561369686695","327849974655106398457073818963514309644","232770925656593694702535789460178335421","121926504179787243869632100220920292447","65784413074703852019902690369177468853","257033615836102425497383102943309044260","273016957322532321809597124576960259512","160195489047638132733388552469768451220"],"threshold":0.9},"id":"CVE-2026-113604-73750353","signature_type":"Line","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java"}},{"digest":{"function_hash":"173865584661815975088022966795765389909","length":745},"id":"CVE-2026-113604-79657605","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"parseDynamicStringTable"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Processors/MIPS/src/main/java/ghidra/app/util/bin/format/elf/relocation/MIPS_Elf64Relocation.java"},"deprecated":false,"digest":{"line_hashes":["44761700716442373898984997486769626498","83251576582027057542056005538258368955","304923890434777178357845710231190332919","163931747646580134747765825601274284399","235966938608200286435646141009223856862"],"threshold":0.9},"id":"CVE-2026-113604-7f745e93","signature_type":"Line"},{"id":"CVE-2026-113604-8aea8f2b","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java","function":"processSymbolTables"},"deprecated":false,"digest":{"function_hash":"162335800453775548503270459351086896506","length":851}},{"id":"CVE-2026-113604-914db27d","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java","function":"parseStandardRelocations"},"deprecated":false,"digest":{"function_hash":"7247472171157040900105406337552271580","length":288}},{"id":"CVE-2026-113604-9757908c","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfProgramHeader.java","function":"isInvalidOffset"},"deprecated":false,"digest":{"function_hash":"238453134538040413912246529805480229133","length":124}},{"digest":{"function_hash":"116306039842376991886155315948589030701","length":1693},"id":"CVE-2026-113604-a953ad5c","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java","function":"markupSectionHeaders"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocation.java"},"deprecated":false,"digest":{"line_hashes":["116276261650087811334078344823905250803","148594762069750173077738062223173131026","249718028773216858987967938177382020747","306632234206451738256983995839068477764","8955078153164822247246050028396407097","107987886035618395544906660218589041981","27902459804080328133811778906646515450","219303945338134353943480841882701917521","305656390887891539277135576923471486551","277822287734121087595566508207302595815","137451108168041848371802004609760478530","93912339782642083303619051659730414495","125961243175841765364322062016200860694","14869592311565017343496354855068121686","247098059786342652687734339009902753490","91121894081954405283415355747585745860","320854984063618097473059609363360165386","90705590849442418912090913264345472002","173271273948101595471043218142301253007","171368802224220675413091231514938818243","269991031479782880866352332005019223780","50557416256412247069728293131104942373","169523683842891010449541218802587840957","57362146035041110955876964472000941481","99560740104531249794377167504024643908","282408455437115871087848580342225131284","307307769207422558777493972083271083711"],"threshold":0.9},"id":"CVE-2026-113604-ab355239"},{"target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java","function":"parseAndroidRelocations"},"deprecated":false,"digest":{"function_hash":"210834743299603087245269976901461994091","length":1902},"id":"CVE-2026-113604-be780a69","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3"},{"deprecated":false,"digest":{"function_hash":"1906846185460285588682277936472873762","length":351},"id":"CVE-2026-113604-c0f55351","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocation.java","function":"readEntryData"}},{"source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"function":"readNextRelrEntry","file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java"},"deprecated":false,"digest":{"function_hash":"287932789956305966021479064956200844994","length":123},"id":"CVE-2026-113604-c3ad4550","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2026-113604-cd673a76","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Processors/MIPS/src/main/java/ghidra/app/util/bin/format/elf/relocation/MIPS_Elf64Relocation.java","function":"initElfRelocation"},"deprecated":false,"digest":{"function_hash":"234532645650253498580949499150990686811","length":574}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"function":"markupProgramHeaders","file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/opinion/ElfProgramBuilder.java"},"deprecated":false,"digest":{"length":1650,"function_hash":"219032936766174789583627496921422629370"},"id":"CVE-2026-113604-cda69ef4"},{"id":"CVE-2026-113604-d36efd6a","signature_type":"Line","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbol.java"},"deprecated":false,"digest":{"line_hashes":["223909903941672162730957698157167615735","166353931983820382333126187238588407533","250883179607015455307305660123500138093","171567961548903753310299633429097687652"],"threshold":0.9}},{"target":{"function":"parseDynamicTable","file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java"},"deprecated":false,"digest":{"function_hash":"173546987187867589348488903467052154264","length":1017},"id":"CVE-2026-113604-dbb9951a","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3"},{"target":{"function":"parseProgramHeaders","file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java"},"deprecated":false,"digest":{"function_hash":"3081073668084952144335199333340213258","length":725},"id":"CVE-2026-113604-ddd7c8b9","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3"},{"id":"CVE-2026-113604-e238406c","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbol.java","function":"ElfSymbol"},"deprecated":false,"digest":{"function_hash":"170089419948767148266378968507734689588","length":913}},{"deprecated":false,"digest":{"function_hash":"260100218790988753869624131784864295654","length":385},"id":"CVE-2026-113604-e5a7cdcd","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java","function":"parseRelrRelocations"}},{"id":"CVE-2026-113604-e7424c7a","signature_type":"Line","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocationTable.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["45700985836668605634716653524802429529","105589839723670796611664329574570257223","143257242833394439415466179571755212358","47154492364339176245139680637210331818","54816961898673143850886657454451804420","84682864500745075187209364890361390503","84643382713731688473384301046912861681","159919033425707240320443723595732674969","11706078050879922892026857646318568572","283229902839346572202861014099280514589","81776479086545196628312010327050706280","54282474226481603069658593148917772845","110434654075910737441818397916992915024","121908280758510320474335361897702873387","278135959475257759754429408858818273154","57953858591053109924921823046500620336","102460537290498666560972635037287176845","128734235867860372050911298218026924001","231006592519701976433512202255380724334","118570803377584352225968845867435611151","45509848110747957366776870553230052999","176931985543633133380494232616363393442","321715780215785307285103465067791923687","224791671955451079444368935455353591750","272297991396446237187821240778493929867","65200583463638093072262816801879504956","304331379692414854873475006694062409117","239148027593586126080940445662526737423","65671637615312765722477478520596657050","13279232492184569369757185252015988896","243734034695976056325676587335762492647","185785972091550048858121069819005783576","295411466730785594196487734101057147238","123207072327663030373471565182972783090","96723623108006360668376369635978763910","179605978076728583139898742690585872836","64669628988617373721669994927015088955","122312332163907816290201962688584224895","120096451872046595913823966922719611057","112818475348557803693368614609777310940","75975206575605303888151911579768267973","51820538802191544886535031007888225133","16558263660213968101852438783445559644","197021846461332396848172674962071179807","317929416921450629873137819478262732926","200317106897923998143596164347778500640","252181313254303596306044775935972729170","10218837044441185640154183547120895231","3146159397385546553317751166088114303","148541441170708298042823878633951473398","244727567984161000652944691521910288737","282977082559345765552120942714408204421","317998393788190571206875241815092556885","300216196563779722746469214280933925381","331155968115473921913359989699558108283","158047439318628423323143041555936977043","51329979135914656317204800530280627743","24917958730878356922807201177608274462","259901235453429229177659253945365336904","118688307594972647520075232437520505531","234648380617917666165940080992178896063","140862835391173134999294604187698542927","194531681610730333187153776481471196485","125035605487183544668766158082422074015","215228093847799763240617908564231170735","71064009666317310333334556142295591944","15322304096878404293841355379100169305","171219509660403827069434163501045596109","337227806885883904115801762942891744288","309071728170004171309021951979755416430","328639076760813675043994685347313613438","58908728038216145356052201277968436852","188169833186497716165390225748131228820","106319846579528952680086099816750104193","135975703995704325966641954243754041179","62023232204635525291310839461721276059","193570839666352866630244225505617974821","313015748382271738198111260445363298267","20646167925986952805449636371193419113","23373383106401092518608823724021578559","124558665347220083714414054602678137704","307839933687115234257529658957427990879","86048087796238804075769311178150127115","236959743197353114175397229777271764122","5279796874353107786106895122076837568"]}},{"id":"CVE-2026-113604-ea8754d1","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfRelocation.java","function":"createElfRelocation"},"deprecated":false,"digest":{"length":223,"function_hash":"256938940938393682218517544318765071625"}},{"deprecated":false,"digest":{"function_hash":"149324661686917486104321840554088144109","length":2092},"id":"CVE-2026-113604-ee1ac0ee","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"function":"parseSectionBasedRelocationTable","file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java"}},{"source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfSymbolTable.java","function":"toDataType"},"deprecated":false,"digest":{"function_hash":"321442879232492824505702492395845224484","length":949},"id":"CVE-2026-113604-f08d7f70","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"203009065104550337325595470872332757475","length":60},"id":"CVE-2026-113604-f2c106fb","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"function":"setOffset","file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfProgramHeader.java"}},{"id":"CVE-2026-113604-fe01dad1","signature_type":"Function","signature_version":"v1","source":"https://github.com/nationalsecurityagency/ghidra/commit/6c50a66e8a939e2bcbaf0a6432ec5d53a41ceeb3","target":{"file":"Ghidra/Features/Base/src/main/java/ghidra/app/util/bin/format/elf/ElfHeader.java","function":"ElfHeader"},"deprecated":false,"digest":{"function_hash":"95689597050517296382708063838131713883","length":2020}}],"vanir_signatures_modified":"2026-10-21T09:40:59Z"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}