EUVD-2026-46398
NULL Pointer Dereference (CWE-476)
N/A
vendor:alpine
5.1
CVSS 3.1 · Vendor: vendor:alpine
Share
Severity by source
Vendor (vendor:alpine)
PRIMARY
5.1
MEDIUM
AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from Vendor (vendor:alpine) · only source for this CVE.
CVSS VectorVendor: vendor:alpine
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Lifecycle Timeline
3
Patch available
Jul 21, 2026 - 23:36 EUVD
CVSS changed
Jul 21, 2026 - 21:22 NVD
5.1 (MEDIUM)
Analysis Generated
May 27, 2026 - 22:56 vuln.today
DescriptionCVE.org
Alpine Linux: capstone fixed in 5.0.8-r0
AnalysisAI
Capstone disassembly framework package in Alpine Linux has been patched at version 5.0.8-r0, addressing an unspecified vulnerability. The nature of the flaw, affected attack surface, and potential impact are not disclosed in available intelligence - only the vendor-reported fix version is confirmed. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Access
Attacker provides malicious input
Exploit
capstone library processes crafted data
Execution
vulnerability triggered
Impact
unknown impact
Access
Attacker provides malicious input
Exploit
capstone library processes crafted data
Execution
vulnerability triggered
Impact
unknown impact
Vulnerability AssessmentAI
| Exploitation | Exploitation conditions cannot be determined from available data. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Risk assessment is severely constrained by absent data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | The specific attack scenario cannot be constructed from available data - no vulnerability type, attack vector, or affected functionality is disclosed. If capstone is used to disassemble untrusted binary input (a common use case in malware analysis or CTF tooling), a crafted binary could potentially trigger the flaw, but this is speculative without confirmed CWE or CVSS vector data. … |
| Remediation | Upgrade the Alpine Linux capstone package to version 5.0.8-r0 or later using 'apk upgrade capstone' on affected Alpine systems. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-476 – NULL Pointer Dereference
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).