PT-2026-62077 · Capstone · Capstone

CVE-2026-47143 · Published 2026-05-26 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Capstone versions prior to 6.0.0-Alpha8 Capstone versions prior to 5.0.8

Description A NULL pointer dereference occurs in the modRMRequired() and decode() functions when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE X86 REDUCE. A remote attacker can cause a crash in applications using the reduced X86 Capstone library by providing a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>.

Recommendations Update to version 6.0.0-Alpha8 or later. Update to version 5.0.8 or later.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-47143

GHSA-289W-CM54-FGRM

Affected Products

Capstone

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/47xxx/CVE-2026-47143.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-47143 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47143 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-47143 · Vendor Advisory
• https://github.com/capstone-engine/capstone/commit/fab595205fee206f5c21be6ed8ad2eaf9225f1c7 · Note
• https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm · Note
• https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f · Note
• https://github.com/capstone-engine/capstone/pull/2924 · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-47143 · Note