CVE-2019-16941

NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used with a modified XML document. This occurs in Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java. An attack could start with an XML document that was originally created by DumpFunctionPatternInfoScript but then directly modified by an attacker (for example, to make a java.lang.Runtime.exec call).

• CWE-91

• https://github.com/NationalSecurityAgency/ghidra/blob/79d8f164f8bb8b15cfb60c5d4faeb8e1c25d15ca/Ghidra/Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java#L187-L188Third Party Advisory
• https://github.com/NationalSecurityAgency/ghidra/commit/a17728f8c12effa171b17a25ccfb7e7d9528c5d0
• https://github.com/NationalSecurityAgency/ghidra/issues/1090Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/purpleracc00n/CVE-2019-16941
• https://twitter.com/NSAGov/status/1178812792159248385
• https://www.symantec.com/security-center/vulnerabilities/writeup/110223?om_rssid=sr-advisories
• https://github.com/NationalSecurityAgency/ghidra/blob/79d8f164f8bb8b15cfb60c5d4faeb8e1c25d15ca/Ghidra/Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBitPatternInfoReader.java#L187-L188Third Party Advisory
• https://github.com/NationalSecurityAgency/ghidra/commit/a17728f8c12effa171b17a25ccfb7e7d9528c5d0
• https://github.com/NationalSecurityAgency/ghidra/issues/1090Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/purpleracc00n/CVE-2019-16941
• https://twitter.com/NSAGov/status/1178812792159248385
• https://www.symantec.com/security-center/vulnerabilities/writeup/110223?om_rssid=sr-advisories

Published

Sep 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1693A vulnerability in the WebVPN service of Cisco Adaptive Secu…6.5
• CVE-2019-16930Zcashd in Zcash before 2.0.7-3 allows discovery of the IP ad…5.3
• CVE-2019-16931A stored XSS vulnerability in the Visualizer plugin 3.3.0 fo…6.1
• CVE-2019-16932A blind SSRF vulnerability exists in the Visualizer plugin b…10
• CVE-2019-16935The documentation XML-RPC server in Python through 2.7.16, 3…6.1
• CVE-2019-1694A vulnerability in the TCP processing engine of Cisco Adapti…8.6
• CVE-2019-16942A Polymorphic Typing issue was discovered in FasterXML jacks…9.8
• CVE-2019-16943A Polymorphic Typing issue was discovered in FasterXML jacks…9.8
• CVE-2019-16948An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31…9.8
• CVE-2019-16949An issue was discovered in Enghouse Web Chat 6.1.300.31 and …6.5
• CVE-2019-1695A vulnerability in the detection engine of Cisco Adaptive Se…6.5
• CVE-2019-16950An XSS issue was discovered in Enghouse Web Chat 6.1.300.31 …6.1