capstone: Capstone: Denial of service via out-of-bounds read in M68K and RISCV backends

zetlyn/cve-redhat vulnerability cve CVE-2026-49282 known 2026-08-14

https://access.redhat.com/security/cve/CVE-2026-49282

Properties

cvss

6.2

receipt

Source: Red Hat
Its words: 6.2
Read by: field:cvss3_score
Said since: 2026-09-29 09:44 UTC
Last answered: 2026-10-06 13:02 UTC
Original: open at the source

What the source handed over

{
  "CVE": "CVE-2026-49282",
  "CWE": "CWE-125",
  "advisories": [],
  "affected_packages": [],
  "bugzilla": "2516103",
  "bugzilla_description": "capstone: Capstone: Denial of service via out-of-bounds read in M68K and RISCV backends",
  "cvss3_score": "6.2",
  "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-08-14T17:44:44Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-49282.json",
  "severity": "moderate"
}

cvss_vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

receipt

Source: Red Hat
Its words: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Read by: field:cvss3_scoring_vector
Said since: 2026-10-06 13:01 UTC
Last answered: 2026-10-06 13:02 UTC
Original: open at the source

2026-10-06 13:01 UTC	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2026-09-29 09:44 UTC	—

What the source handed over

{
  "CVE": "CVE-2026-49282",
  "CWE": "CWE-125",
  "advisories": [],
  "affected_packages": [],
  "bugzilla": "2516103",
  "bugzilla_description": "capstone: Capstone: Denial of service via out-of-bounds read in M68K and RISCV backends",
  "cvss3_score": "6.2",
  "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-08-14T17:44:44Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-49282.json",
  "severity": "moderate"
}

cwe

CWE-125

receipt

Source: Red Hat
Its words: CWE-125
Read by: field:CWE
Said since: 2026-09-29 09:44 UTC
Last answered: 2026-10-06 13:02 UTC
Original: open at the source

What the source handed over

{
  "CVE": "CVE-2026-49282",
  "CWE": "CWE-125",
  "advisories": [],
  "affected_packages": [],
  "bugzilla": "2516103",
  "bugzilla_description": "capstone: Capstone: Denial of service via out-of-bounds read in M68K and RISCV backends",
  "cvss3_score": "6.2",
  "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-08-14T17:44:44Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-49282.json",
  "severity": "moderate"
}

severity

moderate

A flaw that is harder to exploit, or whose impact is limited.

receipt

Source: Red Hat
Its words: moderate
Read by: field:severity
Said since: 2026-09-29 09:44 UTC
Last answered: 2026-10-06 13:02 UTC
Original: open at the source

What the source handed over

{
  "CVE": "CVE-2026-49282",
  "CWE": "CWE-125",
  "advisories": [],
  "affected_packages": [],
  "bugzilla": "2516103",
  "bugzilla_description": "capstone: Capstone: Denial of service via out-of-bounds read in M68K and RISCV backends",
  "cvss3_score": "6.2",
  "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cvss_score": null,
  "cvss_scoring_vector": null,
  "package_state": null,
  "public_date": "2026-08-14T17:44:44Z",
  "resource_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-49282.json",
  "severity": "moderate"
}

Text

capstone: Capstone: Denial of service via out-of-bounds read in M68K and RISCV backends