TI-2025-41703 CVE-2025-68114
Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
Priority HIGH 75
Capstone is a disassembly framework.
capstone-engine
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
capstone-engine records in CISA KEVNo capstone-engine vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records
TI-2025-41500 CVE-2025-67873
Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
Priority HIGH 67
Capstone is a disassembly framework.
TI-2026-40345 CVE-2026-55894
Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode
Priority MEDIUM 63
Capstone is a disassembly framework.
Priority MEDIUM 60
Capstone is a disassembly framework.
TI-2026-36469 CVE-2026-49282
Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes
Priority MEDIUM 56
Capstone is a disassembly framework.
TI-2026-36458 CVE-2026-49263
Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization
Priority MEDIUM 44
Capstone is a disassembly framework.
TI-2017-04662 CVE-2017-6952 · GHSA-3v99-hpv7-9hh9
Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4…
Priority MEDIUM 41
Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecif…
TI-2026-40344 CVE-2026-55893
Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode
Priority LOW 33
Capstone is a disassembly framework.
TI-2016-06150 CVE-2016-7151 · GHSA-xx4j-rvcc-2vhr
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access)…
Priority LOW 27
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.