CVE-2026-55894

A flaw was found in Capstone, a disassembly framework. The sh_disassemble() function incorrectly processes 16-bit instructions, leading to an attempt to read data from an unauthorized memory location (an out-of-bounds read). A remote attacker could exploit this by providing specially crafted bytecode to an application using Capstone in specific modes (SH2A or SH4A with SHFPU). This could cause the application to crash, resulting in a Denial of Service (DoS), where the service becomes unavailable. No code execution or information disclosure was demonstrated as a result of this flaw.

This Moderate impact flaw in Capstone's SH disassembler can lead to a denial of service. An application processing specially crafted SH2A or SH4A bytecode with Capstone configured for these specific modes may crash due to an out-of-bounds read. This issue does not result in code execution or information disclosure, limiting its severity to service disruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.