A normally executable PE32+ file could drive Ghidra's x64 chained-unwind parser into uncontrolled recursion, exhausting the Java stack during import.
Five runtime-validated vulnerabilities across privileged service trust, RPC command execution, kernel-monitor control, nonpaged-pool pressure, and telemetry controls.
A UTF-16 mapped path could expand beyond a fixed destination after UTF-8 conversion, causing an invalid-argument fast fail. The submitted fix bounds and terminates the copy.
Kernel memory-safety faults in VBS and virtualization infrastructure: local denial-of-service paths in vid.sys and a separate local elevation-of-privilege issue.
Three distinct local denial-of-service vulnerabilities caused by kernel memory-safety faults in a Windows networking component.
Instruction-decoder inconsistencies and analysis seams around overlapping instruction streams.
Parser failures while processing adversarial binaries, including a code-execution vulnerability.
Loader bugs exercised through malformed binary input, including denial-of-service behavior.