CVE-2026-55893: CWE-122: Heap-based Buffer Overflow in capstone-engine capstone
Description
A heap buffer overflow vulnerability exists in Capstone's SH floating-point decoders due to improper validation of operand array size. This flaw can be triggered by a local attacker providing crafted SH2A FPU bytecode, potentially causing application crashes and possibly enabling arbitrary code execution. Red Hat has issued updated RPM packages for Red Hat Hardened Images to address this issue.
CVSS v4.0
Score 7.3high
Affected software
pkg:deb/ubuntu/capstone?arch=source&distro=xenialpkg:deb/ubuntu/capstone?arch=source&distro=bionicpkg:deb/ubuntu/capstone?arch=source&distro=focalpkg:deb/ubuntu/capstone?arch=source&distro=jammypkg:deb/ubuntu/capstone?arch=source&distro=noblepkg:deb/ubuntu/capstone?arch=source&distro=stonkingpkg:deb/ubuntu/capstone?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-55893 is a heap buffer overflow vulnerability in the Capstone disassembly framework's SH floating-point decoders (such as opFADD, opFMUL, and opFSUB) caused by improper validation of operand array size. This vulnerability allows a local attacker to supply specially crafted SH2A FPU bytecode that may lead to denial of service via application crashes and potentially arbitrary code execution. Red Hat has released updated RPM packages for Red Hat Hardened Images to mitigate this issue.
Potential Impact
The vulnerability can cause application crashes resulting in denial of service and may allow local attackers to execute arbitrary code. There are no known exploits in the wild. The attack vector is local with high attack complexity and partial attack type privileges required. The vulnerability affects the integrity, availability, and confidentiality of the affected system components.
Mitigation Recommendations
Red Hat has provided updated RPM packages for Red Hat Hardened Images that address this vulnerability. Users should apply these updates as per the Red Hat advisory RHSA-2026:59419 to remediate the issue. No other mitigation steps are specified or required.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:59419
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-55894"]
- State
- PUBLISHED
Threat ID: 6a9c2633acd9273b49fc97e4
Added to database: 09/05/2026, 14:24:51 UTC
Last enriched: 10/18/2026, 04:49:28 UTC
Last updated: 10/18/2026, 22:02:55 UTC
Views: 39
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.