CVE-2026-47143
MEDIUM
MEDIUM
Priority: 0.03
BB Relevance:
62/100
Published: 2026-07-21
Modified: 2026-10-24
First seen: 2026-10-29
Status: active
Attack Surface
Network
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F <modrm> <imm8>`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| capstone-engine | capstone | < 5.0.8 |
| capstone-engine | capstone | 6.0.0 |
| capstone-engine | capstone | 6.0.0 |
| capstone-engine | capstone | 6.0.0 |
| capstone-engine | capstone | 6.0.0 |
| capstone-engine | capstone | 6.0.0 |
| capstone-engine | capstone | 6.0.0 |
| capstone-engine | capstone | 6.0.0 |
References & Advisories (4)
Patch
Patch
Issue Tracking
Patch
Exploit
Vendor Advisory