CVE-2019-17665

HIGH

NSA Ghidra < 9.0.2 - Uncontrolled Search Path

Title source: rule

Description

NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory.

References (1)

Scores

CVSS v3 7.8
EPSS 0.0014
EPSS Percentile 33.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-427
Status published

Affected Products (1)

nsa/ghidra < 9.0.2

Timeline

Published Oct 16, 2019
Tracked Since Feb 18, 2026