CVE-2026-47143

A flaw was found in the Capstone disassembly framework. This vulnerability, a null pointer dereference, can be exploited by a remote attacker. By providing a specially crafted input containing a specific 4-byte sequence during the disassembly of 3DNow! opcodes, the attacker can cause any application using the reduced X86 Capstone library to crash, leading to a denial of service (DoS).

A flaw was found in the Capstone disassembly framework. A NULL pointer dereference in modRMRequired() and decode() when disassembling 3DNow! opcodes can crash applications using Capstone. This vulnerability only affects builds compiled with the -DCAPSTONE_X86_REDUCE flag; standard full builds are not vulnerable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.