CVE-2026-47143

Published: Jul 21, 2026Modified: Jul 30, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F <modrm> <imm8>`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Affected (8)

Products: Capstone Engine: Capstone

Capstone Engine

1 product

Capstone

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Capstone Engine Capstone	Before 5.0.8
Capstone Engine Capstone	Version 6.0.0 alpha1
Capstone Engine Capstone	Version 6.0.0 alpha2
Capstone Engine Capstone	Version 6.0.0 alpha3
Capstone Engine Capstone	Version 6.0.0 alpha4
Capstone Engine Capstone	Version 6.0.0 alpha5
Capstone Engine Capstone	Version 6.0.0 alpha6
Capstone Engine Capstone	Version 6.0.0 alpha7