capstone-engine Capstone up to 6.0.0-Alpha9 SH Disassembler arch/SH/SHDisassembler.c sh_disassemble memory corruption

Summaryinfo

A vulnerability, which was classified as problematic, was found in capstone-engine Capstone up to 6.0.0-Alpha9. The impacted element is the function sh_disassemble of the file arch/SH/SHDisassembler.c of the component SH Disassembler. The manipulation results in memory corruption. This vulnerability is identified as CVE-2026-55894. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, was found in capstone-engine Capstone up to 6.0.0-Alpha9. Affected is the function sh_disassemble of the file arch/SH/SHDisassembler.c of the component SH Disassembler. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on availability. CVE summarizes:

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c sh_disassemble() function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode[] function-pointer table. An application using CS_ARCH_SH with CS_MODE_SH2A or CS_MODE_SH4A and CS_MODE_SHFPU can pass crafted bytecode through cs_disasm_iter() or cs_disasm(), causing the decode[idx] test to read outside the table and terminate the process with a segmentation fault. No code execution or information disclosure was demonstrated. This issue is fixed in version 6.0.0-Alpha10.

The advisory is available at github.com. This vulnerability is traded as CVE-2026-55894 since 06/17/2026. The exploitability is told to be easy. It is possible to launch the attack remotely. Technical details are known, but there is no available exploit.

Upgrading to version 6.0.0-Alpha10 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• capstone-engine

Name

• Capstone

Version

• 6.0.0-Alpha9

Website

• Product: https://github.com/capstone-engine/capstone/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion