14 matches found
Astra Linux – Vulnerability in Capstone
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and earlier, a unchecked return from vsnprintf in SStreamconcat allowed a malicious csoptmem.vsnprintf to manipulate SStream’s index beyond its limit, resulting in a stack buffer underflow/overflow when the next write operation occurre...
CVE-2026-47143
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...
Amazon Linux 2 : capstone, --advisory ALAS2-2026-3351 (ALAS-2026-3351)
The version of capstone installed on the remote host is prior to 3.0.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3351 advisory. Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0.1.2)
The version of AHV installed on the remote host is prior to 11.0.1.2 / AHV-11.0.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0.1.2 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in...
Astra Linux – Vulnerability in Capstone
Capstone 3.0.4 has a out-of-bounds vulnerability SEGV caused by a read memory access in X86insnregintel in arch/X86/X86Mapping.c...
AlmaLinux 10 : capstone (ALSA-2026:6817)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:6817 advisory. capstone: Capstone: Memory corruption via unchecked vsnprintf return CVE-2025-68114 capstone: Capstone: Heap buffer overflow via skipdata callback allows...
The vulnerability of the cs_disasm() and cs_disasm_iter() functions in the Capstone compiler allows a hacker to execute arbitrary code.
The vulnerability of the csdisasm and csdisasmiter functions in Capstone’s binary code analysis engine is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the cs_opt_mem.vsnprintf() function in the analysis engine for binary code from Capstone allows a hacker to execute arbitrary code.
The vulnerability of the csoptmem.vsnprintf function in Capstone’s binary code analysis engine is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
RockyLinux 9 : capstone (RLSA-2026:4898)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:4898 advisory. capstone: Capstone: Memory corruption via unchecked vsnprintf return CVE-2025-68114 capstone: Capstone: Heap buffer overflow via skipdata callback allows...
RHEL 9 : capstone (RHSA-2026:5123)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:5123 advisory. Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security...
TencentOS Server 4: capstone (TSSA-2026:0098)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0098 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
CVE-2025-68114
Capstone CVE-2025-68114 affects Capstone 6.0.0-Alpha5 and earlier. The vulnerability arises from an unchecked return value from vsnprintf in SStream_concat, which can drive SStream’s index negative or past the end and cause a stack buffer underflow/overflow on the next write. The issue has a fixe...
