5.9

CVE-2026-47143

Exploit

Capstone has a NULL Pointer Dereference with 3DNow! opcodes

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F <modrm> <imm8>`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Capstone-engine ≫ Capstone Version < 5.0.8
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha1
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha2
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha3
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha4
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha5
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha6
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.326
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
security-advisories@github.com 5.1 1.4 3.6
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm
Vendor Advisory
Exploit
https://github.com/capstone-engine/capstone/pull/2924
Patch
Issue Tracking
https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f
Patch
https://github.com/capstone-engine/capstone/commit/fab595205fee206f5c21be6ed8ad2eaf9225f1c7
Patch