The CVE-2026-55894 vulnerability affects the Capstone disassembly framework, specifically versions 6.0.0-Alpha9 and earlier. This vulnerability can cause a segmentation fault via crafted bytecode. The issue arises from the sh_disassemble() function's computation of an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode[] function-pointer table. The vulnera [truncated]
A NULL pointer dereference vulnerability exists in the Capstone disassembly framework, affecting versions prior to 6.0.0-Alpha8 and 5.0.8. The vulnerability occurs in the `modRMRequired()` and `decode()` functions when disassembling 3DNow! opcodes (`0F 0F`). A remote attacker can crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F [truncated]
