TencentOS Server 4: capstone (TSSA-2026:1020)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1020 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

capstone: Capstone: Denial of Service via crafted SH2A bytecode

A flaw was found in Capstone, a disassembly framework. The shdisassemble function incorrectly processes 16-bit instructions, leading to an attempt to read data from an unauthorized memory location an out-of-bounds read. A remote attacker could exploit this by providing specially crafted bytecode ...

CVE-2026-55894

A flaw was found in Capstone, a disassembly framework. The shdisassemble function incorrectly processes 16-bit instructions, leading to an attempt to read data from an unauthorized memory location an out-of-bounds read. A remote attacker could exploit this by providing specially crafted bytecode ...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the shdisassemble function. An attacker can cause a segmentation fault and terminate the process by supplying crafted SH2A bytecode that leads to an out-of-bounds read in the decode table. Remediation A fix was...

CVE-2026-55894: Out-of-bounds Read

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...