CVE-2026-49282

A flaw was found in Capstone. The csinsnname application programming interface API in the M68K and RISCV backends does not properly validate caller-supplied instruction IDs. An attacker can provide an invalid instruction ID, leading to an out-of-bounds read. This can cause the process to crash,...