Every CVE Search/ Get API key

CVE-2026-47143

Capstone has a NULL Pointer Dereference with 3DNow! opcodes

5.1 MediumFix available

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.47%Up 0.4 points since Jun 12, 2026
90%50%10%1%

What each source reports

CVE List Score used 5.1

Capstone has a NULL Pointer Dereference with 3DNow! opcodes

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
CVE-2026-47143
CVSS 3.1
5.1 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
EUVDEUVD-2026-46398 5.1

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
EUVD-2026-46398
CVSS 3.1
5.1 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
NVD 5.1

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
CVE-2026-47143
CVSS 3.1
5.1 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVALPINE-CVE-2026-47143 5.9

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
ALPINE-CVE-2026-47143
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVBELL-CVE-2026-47143 5.9
Record
BELL-CVE-2026-47143
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.1

Capstone has a NULL Pointer Dereference with 3DNow! opcodes

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
CVE-2026-47143
CVSS 3.1
5.1 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2026-47143 5.9

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
DEBIAN-CVE-2026-47143
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVPYSEC-2026-3544 5.9

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
PYSEC-2026-3544
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:43841 5.9

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Record
RHSA-2026:43841
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-47143 5.1

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
UBUNTU-CVE-2026-47143
CVSS 3.1
5.1 MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-92879 No score

CVE-2026-47143 affecting package capstone 4.0.2-4

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
AZL-92879
Updated
2026-11-05
OSVAZL-93312 No score

CVE-2026-47143 affecting package rust for versions less than 1.90.0-10

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes (0F 0F) in builds compiled with -DCAPSTONE_X86_REDUCE, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence 0F 0F <modrm> <imm8>. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.

Record
AZL-93312
Updated
2026-11-05

Affected products

Affected packages

Affected packages
PackageAffectedFixed
capstone
Alpine:v3.23
 before 5.0.8-r0
5.0.8-r0
capstone
Alpine:v3.24
 before 5.0.8-r0
5.0.8-r0
capstone
Azure Linux:3
 through 4.0.2-4 None known
rust
Azure Linux:3
 1.85.0 up to 1.90.0-10
1.90.0-10
capstone
Alpaquita:25
 5.0.6-r0 up to 5.0.9-r0
5.0.9-r0
capstone
Alpaquita:stream
 4.0.2-r5 up to 5.0.8-r0
5.0.8-r0
capstone
Debian:12
 All versions, plus listed versions
4.0.2-54.0.2-5.15.0-1~exp15.0.1-1~exp15.0.3-1
Show 6 moreShow less
5.0.5-15.0.6-15.0.7-15.0.7-1~deb13u15.0.7-25.0.9-1
 None known
capstone
Debian:13
 All versions, plus listed versions
5.0.6-15.0.7-15.0.7-1~deb13u15.0.7-25.0.9-1
 None known
capstone
Debian:14
 before 5.0.9-1, plus listed versions
5.0.6-15.0.7-15.0.7-1~deb13u15.0.7-2
5.0.9-1
capstone
PyPI
 before 5.0.8, plus listed versions
2.02.13.03.0.13.0.2
Show 19 moreShow less
3.0.33.0.43.0.53.0.5.post13.0.5rc24.0.04.0.14.0.25.0.05.0.0.post15.0.0rc25.0.0rc45.0.15.0.25.0.35.0.45.0.55.0.65.0.7
5.0.8
Show 12 moreShow less
Affected packages
PackageAffectedFixed
capstone
Red Hat:hummingbird:1
 before 0:5.0.8-0.1.hum1
0:5.0.8-0.1.hum1
capstone-devel
Red Hat:hummingbird:1
 before 0:5.0.8-0.1.hum1
0:5.0.8-0.1.hum1
capstone-java
Red Hat:hummingbird:1
 before 0:5.0.8-0.1.hum1
0:5.0.8-0.1.hum1
capstone-static
Red Hat:hummingbird:1
 before 0:5.0.8-0.1.hum1
0:5.0.8-0.1.hum1
python3-capstone
Red Hat:hummingbird:1
 before 0:5.0.8-0.1.hum1
0:5.0.8-0.1.hum1
capstone
Ubuntu:16.04:LTS
 All versions, plus listed versions
3.0.4-0.13.0.4-0.2
 None known
capstone
Ubuntu:18.04:LTS
 All versions, plus listed versions
3.0.4-33.0.4-5
 None known
capstone
Ubuntu:20.04:LTS
 All versions, plus listed versions
4.0.1+really+3.0.5-14.0.1+really+3.0.5-1build1
 None known
capstone
Ubuntu:22.04:LTS
 All versions, plus listed versions
4.0.2-34.0.2-3build14.0.2-5
 None known
capstone
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.0.2-54.0.2-5ubuntu14.0.2-5.14.0.2-5.1build1
 None known
capstone
Ubuntu:26.10
 All versions, plus listed versions
5.0.7-25.0.9-1
 None known
capstone
Ubuntu:26.04:LTS
 All versions, plus listed versions
5.0.6-15.0.6-1build15.0.7-2
 None known

History

History
RecordedChangedSources
factsOSV
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-47143 is a medium vulnerability (CVSS 5.1) in Capstone-engine Capstone, published May 26, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in capstone 5.0.8-r0.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open