Skip to content
OpenAdvisories
High RHSA-2026:59419 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Aug 26, 2026 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 capstone 0:5.0.8-0.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 capstone-devel 0:5.0.8-0.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 capstone-java 0:5.0.8-0.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 capstone-static 0:5.0.8-0.3.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3-capstone 0:5.0.8-0.3.hum1

Vulnerabilities 2

  • High 7.3
    CVE-2026-55893

    Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode

    Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call set_reg() and set_reg_n() using sh_info.op.op_count without checking the fixed-size operan…

    capstone-engine capstone rust capstone Debian Ubuntu Azure Linux
  • Medium 6.8
    CVE-2026-55894

    Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode

    Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c sh_disassemble() function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode[] function-pointe…

    capstone-engine capstone rust capstone Debian Ubuntu Azure Linux

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-55893
  • report
    https://access.redhat.com/security/cve/CVE-2026-55894
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59419.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2520815
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-55893
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-55893
  • article
    https://github.com/capstone-engine/capstone/commit/09e76802380b9e94d9720c44458d9d5282219e7e
  • article
    https://github.com/capstone-engine/capstone/commit/e17ee44a8307ea33375b4727ac4f987650bf7bed
  • article
    https://github.com/capstone-engine/capstone/pull/2968
  • article
    https://github.com/capstone-engine/capstone/pull/2969
  • article
    https://github.com/capstone-engine/capstone/releases/tag/6.0.0-Alpha10
  • article
    https://github.com/capstone-engine/capstone/security/advisories/GHSA-3hpv-wr3j-rxwh
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2520820
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-55894
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-55894
  • article
    https://github.com/capstone-engine/capstone/security/advisories/GHSA-gf2c-xwcp-hvf4