The vulnerability is an out‑of‑memory condition in Ghidra’s rust_demangle function. That function allocates output buffers without any upper bound, permitting an attacker to craft a malicious Rust symbol name that causes exponential memory usage. When Ghidra processes a binary containing such a symbol, the demangler will exhaust system RAM and the Ghidra process will crash, interrupting analysis.

National Security Agency’s Ghidra releases prior to version 12.0.3 are affected. Any installation of Ghidra 12.0.2 or earlier, on any operating system supported by Ghidra, uses the vulnerable demangle implementation.

The CVSS score of 6.7 indicates a moderate severity impact. No EPSS score is publicly available, so the current exploitation probability is unknown. The vulnerability is not listed in CISA‑KEV, suggesting no confirmed public exploits. An attacker would need to supply or force Ghidra to analyze a binary that contains a specially crafted Rust symbol. Successful exploitation would result in a denial of service for the analyst or automated pipeline that is processing the binary.