Описание
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.
A flaw was found in the Capstone disassembly framework. This vulnerability, a null pointer dereference, can be exploited by a remote attacker. By providing a specially crafted input containing a specific 4-byte sequence during the disassembly of 3DNow! opcodes, the attacker can cause any application using the reduced X86 Capstone library to crash, leading to a denial of service (DoS).
Отчет
A flaw was found in the Capstone disassembly framework. A NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes can crash applications using Capstone. This vulnerability only affects builds compiled with the -DCAPSTONE_X86_REDUCE flag; standard full builds are not vulnerable.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | capstone | Not affected | ||
| Red Hat Enterprise Linux 9 | capstone | Not affected | ||
| Red Hat Hardened Images | ruby3.3 | Not affected | ||
| Red Hat Hardened Images | ruby3.4 | Not affected | ||
| Red Hat Hardened Images | ruby4.0 | Not affected | ||
| Red Hat Hardened Images | rust | Not affected | ||
| Red Hat OpenShift Container Platform 4 | rhcos | Not affected | ||
| Red Hat Hardened Images | capstone-main-5.0.8-0.1.hum1 | Fixed | RHSA-2026:43841 | 22.07.2026 |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
5.9 Medium
CVSS3
Связанные уязвимости
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F <modrm> <imm8>`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F <modrm> <imm8>`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 an ...
EPSS
5.9 Medium
CVSS3