NULL Pointer Dereference Vulnerability in Capstone Disassembly Framework
CVE-2026-47143
5.1MEDIUM
What is CVE-2026-47143?
The Capstone Disassembly Framework is vulnerable to a NULL pointer dereference that occurs in the modRMRequired() and decode() functions when disassembling 3DNow! opcodes. This vulnerability, present in builds compiled with -DCAPSTONE_X86_REDUCE, can be exploited by a remote attacker to crash any application utilizing the affected versions of Capstone. The issue can be triggered by sending a specially crafted input containing a 4-byte sequence (0F 0F <modrm> <imm8>). The vulnerability has been addressed in versions 6.0.0-Alpha8 and 5.0.8.
Affected Version(s)
capstone < 5.0.8 < 5.0.8
capstone < 6.0.0-Alpha8 < 6.0.0-Alpha8