Ghidra

An arbitrary code execution vulnerability in the Ghidra Swift demangler analyzer allows attackers to execute arbitrary binaries by manipulating the Swift tool directory path within a project file.

Ghidra versions before 12.0.3 improperly process annotation directives from automatically extracted binary data, leading to arbitrary command execution when an analyst interacts with the user interface by clicking on a crafted element.