Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    Related vulnerabilities

    CVE-2026-47143 (GCVE-0-2026-47143)

    Vulnerability from cvelistv5 – Published: 2026-07-21 20:10 – Updated: 2026-07-22 13:42
    VLAI
    Title
    Capstone has a NULL Pointer Dereference with 3DNow! opcodes
    Summary
    Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F <modrm> <imm8>`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.
    Severity
    5.1 (Medium)
    CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-07-22 13:42 UTC
    CWE
    • CWE-476 - NULL Pointer Dereference
    Assigner
    References
    Impacted products
    Vendor Product Version
    capstone-engine capstone Affected: < 5.0.8
    Affected: < 6.0.0-Alpha8
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-47143",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T13:42:44.951327Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T13:42:55.326Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "capstone",
          "vendor": "capstone-engine",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 5.0.8"
            },
            {
              "status": "affected",
              "version": "\u003c 6.0.0-Alpha8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F \u003cmodrm\u003e \u003cimm8\u003e`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-21T20:10:44.476Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm"
        },
        {
          "name": "https://github.com/capstone-engine/capstone/pull/2924",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/capstone-engine/capstone/pull/2924"
        },
        {
          "name": "https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f"
        },
        {
          "name": "https://github.com/capstone-engine/capstone/commit/fab595205fee206f5c21be6ed8ad2eaf9225f1c7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/capstone-engine/capstone/commit/fab595205fee206f5c21be6ed8ad2eaf9225f1c7"
        }
      ],
      "source": {
        "advisory": "GHSA-289w-cm54-fgrm",
        "discovery": "UNKNOWN"
      },
      "title": "Capstone has a NULL Pointer Dereference with 3DNow! opcodes"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-47143",
    "datePublished": "2026-07-21T20:10:44.476Z",
    "dateReserved": "2026-05-18T19:50:18.696Z",
    "dateUpdated": "2026-07-22T13:42:55.326Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    PYSEC-2026-3544

    Vulnerability from pysec - Published: 2026-07-21 21:16 - Updated: 2026-07-31 09:27
    VLAI
    Details

    Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

    Severity
    5.9 (Medium)
    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
    Impacted products
    Name purl
    capstone pkg:pypi/capstone
    Aliases
    To clipboard 

    {
  "affected": [
    {
      "ecosystem_specific": {},
      "package": {
        "ecosystem": "PyPI",
        "name": "capstone",
        "purl": "pkg:pypi/capstone"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "5.0.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.0",
        "2.1",
        "3.0",
        "3.0.1",
        "3.0.2",
        "3.0.3",
        "3.0.4",
        "3.0.5",
        "3.0.5.post1",
        "3.0.5rc2",
        "4.0.0",
        "4.0.1",
        "4.0.2",
        "5.0.0",
        "5.0.0.post1",
        "5.0.0rc2",
        "5.0.0rc4",
        "5.0.1",
        "5.0.2",
        "5.0.3",
        "5.0.4",
        "5.0.5",
        "5.0.6",
        "5.0.7"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-47143",
    "GHSA-289w-cm54-fgrm"
  ],
  "details": "Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F \u003cmodrm\u003e \u003cimm8\u003e`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.",
  "id": "PYSEC-2026-3544",
  "modified": "2026-07-31T09:27:55.417579Z",
  "published": "2026-07-21T21:16:50.270Z",
  "references": [
    {
      "type": "FIX",
      "url": "https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f"
    },
    {
      "type": "FIX",
      "url": "https://github.com/capstone-engine/capstone/commit/fab595205fee206f5c21be6ed8ad2eaf9225f1c7"
    },
    {
      "type": "FIX",
      "url": "https://github.com/capstone-engine/capstone/pull/2924"
    },
    {
      "type": "EVIDENCE",
      "url": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}