CVE-2026-47143 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2026-47143

Analyzed

More Info Official Page

Source-security-advisories@github.com

Published At-21 Jul, 2026 | 21:16

Updated At-30 Jul, 2026 | 15:16

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F <modrm> <imm8>`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.1	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	3.1	5.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
			N/A

Type: Secondary

Version: 3.1

Base score: 5.1

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 5.9

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: N/A

Version:

Base score:

Base severity: N/A

Vector:

CPE Matches

Weaknesses

CWE ID	Type	Source
CWE-476	Secondary	security-advisories@github.com

CWE ID: CWE-476

Type: Secondary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f	security-advisories@github.com	Patch
https://github.com/capstone-engine/capstone/commit/fab595205fee206f5c21be6ed8ad2eaf9225f1c7	security-advisories@github.com	Patch
https://github.com/capstone-engine/capstone/pull/2924	security-advisories@github.com	Issue Tracking Patch
https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm	security-advisories@github.com	Exploit Vendor Advisory
https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm	134c704f-9b21-4f2e-91b3-4a467353bcc0	Exploit Vendor Advisory

Hyperlink: https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f

Source: security-advisories@github.com

Resource:

Patch

Hyperlink: https://github.com/capstone-engine/capstone/commit/fab595205fee206f5c21be6ed8ad2eaf9225f1c7

Source: security-advisories@github.com

Resource:

Patch

Hyperlink: https://github.com/capstone-engine/capstone/pull/2924

Source: security-advisories@github.com

Resource:

Issue Tracking

Patch

Hyperlink: https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm

Source: security-advisories@github.com

Resource:

Exploit

Vendor Advisory

Hyperlink: https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource:

Exploit

Vendor Advisory