Skip to content
OpenAdvisories
Medium RHSA-2026:43841 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 28, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 capstone 0:5.0.8-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 capstone-devel 0:5.0.8-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 capstone-java 0:5.0.8-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 capstone-static 0:5.0.8-0.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-capstone 0:5.0.8-0.1.hum1

Vulnerabilities 1

  • Medium 5.1
    CVE-2026-47143

    Capstone has a NULL Pointer Dereference with 3DNow! opcodes

    Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote at…

    capstone-engine capstone rust capstone Debian Ubuntu Azure Linux Alpine PyPI

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-47143
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43841.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2504488
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-47143
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-47143
  • article
    https://github.com/capstone-engine/capstone/commit/a0201371719b5aaa91d318ab2898843718f92d1f
  • article
    https://github.com/capstone-engine/capstone/commit/fab595205fee206f5c21be6ed8ad2eaf9225f1c7
  • article
    https://github.com/capstone-engine/capstone/pull/2924
  • article
    https://github.com/capstone-engine/capstone/security/advisories/GHSA-289w-cm54-fgrm