CyberRota Analysis
AI-GeneratedThe Capstone disassembly framework versions 6.0.0-Alpha9 and earlier are vulnerable due to a flaw in the sh_disassemble() function that allows crafted bytecode to cause a segmentation fault by accessing an out-of-bounds index in the decode function-pointer table. While this vulnerability does not lead to code execution or information disclosure, it can crash applications using the affected architecture modes. Developers and organizations utilizing Capstone for SH architecture disassembly should prioritize upgrading to version 6.0.0-Alpha10 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c sh_disassemble() function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode[] function-pointer table. An application using CS_ARCH_SH with CS_MODE_SH2A or CS_MODE_SH4A and CS_MODE_SHFPU can pass crafted bytecode through cs_disasm_iter() or cs_disasm(), causing the decode[idx] test to read outside the table and terminate the process with a segmentation fault. No code execution or information disclosure was demonstrated. This issue is fixed in version 6.0.0-Alpha10.