CVE-2024-58350
LOW
NVD
CVSS Score
2.9
Severity
LOW
Published
Jun 10, 2026
Vendor
unknown
Description
Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiting the unsafe destruction order that causes iteration over deallocated memory.