CyberRota Analysis
AI-GeneratedThe Capstone disassembly framework versions prior to 6.0.0-Alpha8 and 5.0.8 are vulnerable to a NULL pointer dereference in the `modRMRequired()` and `decode()` functions when processing specific 3DNow! opcodes, potentially allowing remote attackers to crash applications utilizing the affected library. Organizations using these versions should prioritize upgrading to the patched releases to mitigate the risk of application instability due to crafted input attacks. This vulnerability is particularly relevant for developers and security teams working with disassembly tools in their software projects.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F <modrm> <imm8>`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)