Vulnerability-Lookup

RHSA-2026:81540

Vulnerability from csaf_redhat - Published: 2026-10-12 21:09 - Updated: 2026-10-16 11:28

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Severity

Moderate

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: capstone: * capstone-5.0.8-0.5.hum1 (aarch64, s390x, x86_64) * capstone-devel-5.0.8-0.5.hum1 (aarch64, s390x, x86_64) * capstone-java-5.0.8-0.5.hum1 (noarch) * capstone-static-5.0.8-0.5.hum1 (aarch64, s390x, x86_64) * python3-capstone-5.0.8-0.5.hum1 (noarch) * capstone-5.0.8-0.5.hum1.src (src) Security Fix(es): capstone: * CVE-2026-49263 * CVE-2026-49282

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-49263

A flaw was found in Capstone, a disassembly framework, affecting its WebAssembly (WASM) backend. A remote attacker could exploit this by providing a specially crafted `br_table` instruction. This could lead to a denial of service, where the disassembler gets stuck in a loop, or cause parser desynchronization, leading to incorrect disassembly of subsequent instructions. This issue impacts the availability and integrity of the disassembler.

6.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 16 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@src	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@aarch64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@s390x	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@x86_64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-49282

A flaw was found in Capstone. The `cs_insn_name()` application programming interface (API) in the M68K and RISCV backends does not properly validate caller-supplied instruction IDs. An attacker can provide an invalid instruction ID, leading to an out-of-bounds read. This can cause the process to crash, resulting in a denial of service (DoS) for applications that expose instruction-name lookup to untrusted IDs.

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-125 - Out-of-bounds Read

Affected products

Fixed 16 products, the same list as for CVE-2026-49263

Threats

Impact Moderate

References

17 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:81540	self
https://access.redhat.com/security/cve/CVE-2026-49263	external
https://access.redhat.com/security/cve/CVE-2026-49282	external
https://access.redhat.com/security/updates/classi…	external
https://images.redhat.com/	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-49263	self
https://bugzilla.redhat.com/show_bug.cgi?id=2516114	external
https://www.cve.org/CVERecord?id=CVE-2026-49263	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49263	external
https://github.com/capstone-engine/capstone/blob/…	external
https://github.com/capstone-engine/capstone/secur…	external
https://access.redhat.com/security/cve/CVE-2026-49282	self
https://bugzilla.redhat.com/show_bug.cgi?id=2516103	external
https://www.cve.org/CVERecord?id=CVE-2026-49282	external
https://nvd.nist.gov/vuln/detail/CVE-2026-49282	external
https://github.com/capstone-engine/capstone/secur…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\ncapstone:\n  * capstone-5.0.8-0.5.hum1 (aarch64, s390x, x86_64)\n  * capstone-devel-5.0.8-0.5.hum1 (aarch64, s390x, x86_64)\n  * capstone-java-5.0.8-0.5.hum1 (noarch)\n  * capstone-static-5.0.8-0.5.hum1 (aarch64, s390x, x86_64)\n  * python3-capstone-5.0.8-0.5.hum1 (noarch)\n  * capstone-5.0.8-0.5.hum1.src (src)\n\nSecurity Fix(es):\n\ncapstone:\n  * CVE-2026-49263\n  * CVE-2026-49282",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:81540",
        "url": "https://access.redhat.com/errata/RHSA-2026:81540"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49263",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49263"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-49282",
        "url": "https://access.redhat.com/security/cve/CVE-2026-49282"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_81540.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
    "tracking": {
      "current_release_date": "2026-10-16T11:28:00+00:00",
      "generator": {
        "date": "2026-10-16T11:28:00+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:81540",
      "initial_release_date": "2026-10-12T21:09:11+00:00",
      "revision_history": [
        {
          "date": "2026-10-12T21:09:11+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-12T21:11:47+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-16T11:28:00+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "capstone-0:5.0.8-0.5.hum1@aarch64",
                "product": {
                  "name": "capstone-0:5.0.8-0.5.hum1@aarch64",
                  "product_id": "capstone-0:5.0.8-0.5.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone@5.0.8-0.5.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "capstone-devel-0:5.0.8-0.5.hum1@aarch64",
                "product": {
                  "name": "capstone-devel-0:5.0.8-0.5.hum1@aarch64",
                  "product_id": "capstone-devel-0:5.0.8-0.5.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone-devel@5.0.8-0.5.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "capstone-static-0:5.0.8-0.5.hum1@aarch64",
                "product": {
                  "name": "capstone-static-0:5.0.8-0.5.hum1@aarch64",
                  "product_id": "capstone-static-0:5.0.8-0.5.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone-static@5.0.8-0.5.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "capstone-0:5.0.8-0.5.hum1@s390x",
                "product": {
                  "name": "capstone-0:5.0.8-0.5.hum1@s390x",
                  "product_id": "capstone-0:5.0.8-0.5.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone@5.0.8-0.5.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "capstone-devel-0:5.0.8-0.5.hum1@s390x",
                "product": {
                  "name": "capstone-devel-0:5.0.8-0.5.hum1@s390x",
                  "product_id": "capstone-devel-0:5.0.8-0.5.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone-devel@5.0.8-0.5.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "capstone-static-0:5.0.8-0.5.hum1@s390x",
                "product": {
                  "name": "capstone-static-0:5.0.8-0.5.hum1@s390x",
                  "product_id": "capstone-static-0:5.0.8-0.5.hum1@s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone-static@5.0.8-0.5.hum1?arch=s390x\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "capstone-0:5.0.8-0.5.hum1@src",
                "product": {
                  "name": "capstone-0:5.0.8-0.5.hum1@src",
                  "product_id": "capstone-0:5.0.8-0.5.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone@5.0.8-0.5.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "capstone-0:5.0.8-0.5.hum1@x86_64",
                "product": {
                  "name": "capstone-0:5.0.8-0.5.hum1@x86_64",
                  "product_id": "capstone-0:5.0.8-0.5.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone@5.0.8-0.5.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "capstone-devel-0:5.0.8-0.5.hum1@x86_64",
                "product": {
                  "name": "capstone-devel-0:5.0.8-0.5.hum1@x86_64",
                  "product_id": "capstone-devel-0:5.0.8-0.5.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone-devel@5.0.8-0.5.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "capstone-static-0:5.0.8-0.5.hum1@x86_64",
                "product": {
                  "name": "capstone-static-0:5.0.8-0.5.hum1@x86_64",
                  "product_id": "capstone-static-0:5.0.8-0.5.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone-static@5.0.8-0.5.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone-java@5.0.8-0.5.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone-java@5.0.8-0.5.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/capstone-java@5.0.8-0.5.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-capstone@5.0.8-0.5.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
                "product": {
                  "name": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_id": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-capstone@5.0.8-0.5.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-s390x-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-capstone@5.0.8-0.5.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-0:5.0.8-0.5.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@aarch64"
        },
        "product_reference": "capstone-0:5.0.8-0.5.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-0:5.0.8-0.5.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@s390x"
        },
        "product_reference": "capstone-0:5.0.8-0.5.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-0:5.0.8-0.5.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@src"
        },
        "product_reference": "capstone-0:5.0.8-0.5.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-0:5.0.8-0.5.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@x86_64"
        },
        "product_reference": "capstone-0:5.0.8-0.5.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-devel-0:5.0.8-0.5.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@aarch64"
        },
        "product_reference": "capstone-devel-0:5.0.8-0.5.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-devel-0:5.0.8-0.5.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@s390x"
        },
        "product_reference": "capstone-devel-0:5.0.8-0.5.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-devel-0:5.0.8-0.5.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@x86_64"
        },
        "product_reference": "capstone-devel-0:5.0.8-0.5.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-static-0:5.0.8-0.5.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@aarch64"
        },
        "product_reference": "capstone-static-0:5.0.8-0.5.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-static-0:5.0.8-0.5.hum1@s390x as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@s390x"
        },
        "product_reference": "capstone-static-0:5.0.8-0.5.hum1@s390x",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "capstone-static-0:5.0.8-0.5.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@x86_64"
        },
        "product_reference": "capstone-static-0:5.0.8-0.5.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms"
        },
        "product_reference": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-49263",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-08-14T18:11:51.212894+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2516114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Capstone, a disassembly framework, affecting its WebAssembly (WASM) backend. A remote attacker could exploit this by providing a specially crafted `br_table` instruction. This could lead to a denial of service, where the disassembler gets stuck in a loop, or cause parser desynchronization, leading to incorrect disassembly of subsequent instructions. This issue impacts the availability and integrity of the disassembler.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "capstone: Capstone: Denial of Service and parser desynchronization via WebAssembly `br_table` instruction-size truncation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw of moderate impact was found in the Capstone disassembly framework\u0027s WebAssembly (WASM) backend, which is shipped in Red Hat Enterprise Linux, Red Hat In-Vehicle OS, and OpenShift (via the RHEL CoreOS 9 container image), as well as in Fedora, EPEL, and Red Hat Hardened Images community offerings and community packages that bundle Capstone (such as imhex and pe-bear). Capstone\u0027s WASM decoder accepts attacker-controlled raw WASM instruction bytes through the public cs_disasm() and cs_disasm_iter() APIs. For a large but well-formed br_table instruction, the decoder accumulates the immediate length in a wider local variable but returns it through a uint16_t instruction-size path. When the encoded instruction length is exactly 65,536 bytes, the size wraps to zero and cs_disasm() can repeatedly decode the same instruction without advancing, causing a denial of service; for larger lengths, cs_disasm_iter() advances into the middle of the br_table payload and decodes target bytes as subsequent instructions, causing parser desynchronization and incorrect disassembly output. The flaw affects the availability and, to a lesser degree, the integrity of applications that use Capstone to disassemble attacker-controlled WASM content; there is no known confidentiality impact. Red Hat rated this flaw Moderate severity (CVSS 3.1 score 6.8), which is higher than the Low rating in the upstream CVEORG record; the difference stems from differing CVSS metric assessments between the issuers. For Red Hat Enterprise Linux, Red Hat In-Vehicle OS, and OpenShift RHEL CoreOS 9, the fix is currently deferred: exploitation requires an application to pass attacker-controlled WASM bytes to the affected disassembly APIs, so the residual risk is limited to denial of service or incorrect disassembly in such applications. For the community (Fedora, EPEL) and Red Hat Hardened Images offerings, a fix is being pursued through the delegated maintenance process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@aarch64",
          "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@s390x",
          "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@src",
          "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@x86_64",
          "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@aarch64",
          "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@s390x",
          "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@x86_64",
          "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@aarch64",
          "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@s390x",
          "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@x86_64",
          "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49263"
        },
        {
          "category": "external",
          "summary": "RHBZ#2516114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49263",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49263"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49263",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49263"
        },
        {
          "category": "external",
          "summary": "https://github.com/capstone-engine/capstone/blob/251c5bb4bc9bb92973e738ae3c5f4ef86f103356/ChangeLog#L102",
          "url": "https://github.com/capstone-engine/capstone/blob/251c5bb4bc9bb92973e738ae3c5f4ef86f103356/ChangeLog#L102"
        },
        {
          "category": "external",
          "summary": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-5m9f-vqcm-g5pr",
          "url": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-5m9f-vqcm-g5pr"
        }
      ],
      "release_date": "2026-08-14T17:49:36.804000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T21:09:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@src",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81540"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Upgrading to Capstone 6.0.0-Alpha9, which contains the upstream fix, addresses this issue.",
          "product_ids": [
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@src",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@src",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "capstone: Capstone: Denial of Service and parser desynchronization via WebAssembly `br_table` instruction-size truncation"
    },
    {
      "cve": "CVE-2026-49282",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-08-14T17:51:04.356254+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2516103"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Capstone. The `cs_insn_name()` application programming interface (API) in the M68K and RISCV backends does not properly validate caller-supplied instruction IDs. An attacker can provide an invalid instruction ID, leading to an out-of-bounds read. This can cause the process to crash, resulting in a denial of service (DoS) for applications that expose instruction-name lookup to untrusted IDs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "capstone: Capstone: Denial of service via out-of-bounds read in M68K and RISCV backends",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Moderate: This flaw in Capstone\u0027s M68K and RISCV backends can lead to a denial of service. Applications that utilize Capstone and expose the `cs_insn_name()` API to untrusted instruction IDs without proper validation are susceptible to an out-of-bounds read, resulting in a crash. The impact is limited to availability and does not involve code execution or information disclosure.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@aarch64",
          "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@s390x",
          "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@src",
          "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@x86_64",
          "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@aarch64",
          "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@s390x",
          "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@x86_64",
          "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
          "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@aarch64",
          "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@s390x",
          "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@x86_64",
          "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
          "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-49282"
        },
        {
          "category": "external",
          "summary": "RHBZ#2516103",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516103"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-49282",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-49282"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-49282",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-49282"
        },
        {
          "category": "external",
          "summary": "https://github.com/capstone-engine/capstone/blob/251c5bb4bc9bb92973e738ae3c5f4ef86f103356/ChangeLog#L102",
          "url": "https://github.com/capstone-engine/capstone/blob/251c5bb4bc9bb92973e738ae3c5f4ef86f103356/ChangeLog#L102"
        },
        {
          "category": "external",
          "summary": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-jrw4-wj52-2vw8",
          "url": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-jrw4-wj52-2vw8"
        }
      ],
      "release_date": "2026-08-14T17:44:44.818000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-10-12T21:09:11+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@src",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:81540"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@src",
            "Red Hat Hardened Images:capstone-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-devel-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:capstone-java-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@aarch64",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@s390x",
            "Red Hat Hardened Images:capstone-static-0:5.0.8-0.5.hum1@x86_64",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-s390x-rpms",
            "Red Hat Hardened Images:python3-capstone-0:5.0.8-0.5.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "capstone: Capstone: Denial of service via out-of-bounds read in M68K and RISCV backends"
    }
  ]
}

CVE-2026-49263 (GCVE-0-2026-49263)

Vulnerability from cvelistv5 – Published: 2026-08-14 17:49 – Updated: 2026-08-17 19:52

Title

Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization

Summary

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public `cs_disasm()` and `cs_disasm_iter()` APIs. For a large but well-formed `br_table` instruction, the WASM decoder accumulates the immediate length in a wider local variable but returns it through a `uint16_t` instruction-size path. When the encoded instruction length is exactly 65,536 bytes, the size wraps to zero and `cs_disasm()` can repeatedly decode the same instruction without advancing. For larger lengths, `cs_disasm_iter()` advances into the middle of the `br_table` payload and decodes target bytes as subsequent instructions. This is an availability and parser-integrity issue. Version 6.0.0-Alpha9 patches the issue.

Severity

2 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-17 19:51 UTC

CWE

CWE-197 - Numeric Truncation Error

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7752 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/capstone-engine/capstone/secur…	x_refsource_CONFIRM
https://github.com/capstone-engine/capstone/blob/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
capstone-engine	capstone	Affected: < 6.0.0-Alpha9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-49263",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-17T19:51:57.796655Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-17T19:52:03.982Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-5m9f-vqcm-g5pr"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "capstone",
          "vendor": "capstone-engine",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 6.0.0-Alpha9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone\u0027s WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public `cs_disasm()` and `cs_disasm_iter()` APIs. For a large but well-formed `br_table` instruction, the WASM decoder accumulates the immediate length in a wider local variable but returns it through a `uint16_t` instruction-size path. When the encoded instruction length is exactly 65,536 bytes, the size wraps to zero and `cs_disasm()` can repeatedly decode the same instruction without advancing. For larger lengths, `cs_disasm_iter()` advances into the middle of the `br_table` payload and decodes target bytes as subsequent instructions. This is an availability and parser-integrity issue. Version 6.0.0-Alpha9 patches the issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 2,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-197",
              "description": "CWE-197: Numeric Truncation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-14T17:49:36.804Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-5m9f-vqcm-g5pr",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-5m9f-vqcm-g5pr"
        },
        {
          "name": "https://github.com/capstone-engine/capstone/blob/251c5bb4bc9bb92973e738ae3c5f4ef86f103356/ChangeLog#L102",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/capstone-engine/capstone/blob/251c5bb4bc9bb92973e738ae3c5f4ef86f103356/ChangeLog#L102"
        }
      ],
      "source": {
        "advisory": "GHSA-5m9f-vqcm-g5pr",
        "discovery": "UNKNOWN"
      },
      "title": "Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-49263",
    "datePublished": "2026-08-14T17:49:36.804Z",
    "dateReserved": "2026-05-28T14:33:01.180Z",
    "dateUpdated": "2026-08-17T19:52:03.982Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-49282 (GCVE-0-2026-49282)

Vulnerability from cvelistv5 – Published: 2026-08-14 17:44 – Updated: 2026-08-17 18:11

Title

Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes

Summary

Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public `cs_insn_name()` API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have missing or incomplete bounds checks. On a Capstone handle opened for M68K or RISCV, a caller-controlled invalid instruction ID can trigger an out-of-bounds read and crash the process. The demonstrated impact is availability loss in applications or bindings that expose instruction-name lookup to untrusted IDs. No code execution or data disclosure was demonstrated. Version 6.0.0-Alpha9 patches the issue.

Severity

5.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-17 18:10 UTC

CWE

CWE-125 - Out-of-bounds Read
CWE-129 - Improper Validation of Array Index
CWE-191 - Integer Underflow (Wrap or Wraparound)

Assigner

GitHub_M CNA under the mitre root

CNA scorecard C 72/100 over 7752 records in the last 180 days details

References

2 references

URL	Tags
https://github.com/capstone-engine/capstone/secur…	x_refsource_CONFIRM
https://github.com/capstone-engine/capstone/blob/…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
capstone-engine	capstone	Affected: < 6.0.0-Alpha9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-49282",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-17T18:10:11.366665Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-17T18:11:13.518Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-jrw4-wj52-2vw8"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "capstone",
          "vendor": "capstone-engine",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 6.0.0-Alpha9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone\u0027s public `cs_insn_name()` API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have missing or incomplete bounds checks. On a Capstone handle opened for M68K or RISCV, a caller-controlled invalid instruction ID can trigger an out-of-bounds read and crash the process. The demonstrated impact is availability loss in applications or bindings that expose instruction-name lookup to untrusted IDs. No code execution or data disclosure was demonstrated. Version 6.0.0-Alpha9 patches the issue."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125: Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-129",
              "description": "CWE-129: Improper Validation of Array Index",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "CWE-191: Integer Underflow (Wrap or Wraparound)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-14T17:44:44.818Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-jrw4-wj52-2vw8",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/capstone-engine/capstone/security/advisories/GHSA-jrw4-wj52-2vw8"
        },
        {
          "name": "https://github.com/capstone-engine/capstone/blob/251c5bb4bc9bb92973e738ae3c5f4ef86f103356/ChangeLog#L102",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/capstone-engine/capstone/blob/251c5bb4bc9bb92973e738ae3c5f4ef86f103356/ChangeLog#L102"
        }
      ],
      "source": {
        "advisory": "GHSA-jrw4-wj52-2vw8",
        "discovery": "UNKNOWN"
      },
      "title": "Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-49282",
    "datePublished": "2026-08-14T17:44:44.818Z",
    "dateReserved": "2026-05-28T20:07:58.861Z",
    "dateUpdated": "2026-08-17T18:11:13.518Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:81540

CVE-2026-49263 (GCVE-0-2026-49263)

CVE-2026-49282 (GCVE-0-2026-49282)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour