capstone: Capstone: Denial of Service and parser desynchronization via WebAssembly `br_table` instruction-size truncation

A flaw was found in Capstone, a disassembly framework, affecting its WebAssembly WASM backend. A remote attacker could exploit this by providing a specially crafted brtable instruction. This could lead to a denial of service, where the disassembler gets stuck in a loop, or cause parser...

capstone

Capstone Engine !TIP ¡Bienvenido a unirte a nuestro grupo comunitario! Capstone es un framework de desensamblaje con el objetivo de convertirse en el motor de desensamblaje definitivo para el análisis binario y la ingeniería inversa en la comunidad de seguridad. Creado por Nguyen Anh Quynh, luego...

fhex

Fhex - Un Editor Hex Completamente Funcional Este proyecto nace con el objetivo de desarrollar una herramienta ligera pero útil. La razón es que los editores hex existentes tienen algunas limitaciones diferentes por ejemplo, demasiadas dependencias, falta de características de coloreado hex, etc...

Rocky Linux 9.6 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.6:CLSA-2026:1774374355)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774374355 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds- checked, so a user-provided...

Rocky Linux 10.1 [CIQ] Security Update: capstone / capstone-debuginfo / capstone-debugsource / etc Multiple Vulnerabilities (crlsa-2026_6817)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266817 advisory. capstone: Capstone: Memory corruption via unchecked vsnprintf return CVE-2025-68114 capstone: Capstone: Heap buffer overflow via skipdata callback allow...

Rocky Linux 9 [CIQ] Security Update: capstone / capstone-debuginfo / capstone-debugsource / etc (crlsa-2026_39309)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639309 advisory. capstone: Capstone: Memory corruption via unchecked vsnprintf return CVE-2025-68114 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.6 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.6:CLSA-2026:1774347657)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774347657 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious...

Rocky Linux 9 [CIQ] Security Update: capstone / capstone-debuginfo / capstone-debugsource / etc Multiple Vulnerabilities (crlsa-2026_4898)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20264898 advisory. capstone: Capstone: Memory corruption via unchecked vsnprintf return CVE-2025-68114 capstone: Capstone: Heap buffer overflow via skipdata callback allows...

Rocky Linux 9.6 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.6:CLSA-2026:1774347657)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774347657 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious...

AlmaLinux 9.6 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.6:CLSA-2026:1774374355)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774374355 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds- checked, so a user-provided skipdat...

AlmaLinux 9.2 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.2:CLSA-2026:1774352914)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1774352914 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious...

AlmaLinux 9.2 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.2:CLSA-2026:1774437715)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1774437715 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds- checked, so a user-provided skipdat...

TencentOS Server 4: capstone (TSSA-2026:1020)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1020 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Astra Linux – Vulnerability in Capstone

Capstone 3.0.4 has a out-of-bounds vulnerability SEGV caused by a read memory access in X86insnregintel in arch/X86/X86Mapping.c...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: capstone: capstone-5.0.8-0.3.hum1 aarch64, x8664 capstone-devel-5.0.8-0.3.hum1 aarch64, x8664 capstone-java-5.0.8-0.3.hum1 noarch capstone-static-5.0.8-0.3.hum1 aarch64, x8664...

capstone: Capstone: Denial of Service via crafted SH2A bytecode

A flaw was found in Capstone, a disassembly framework. The shdisassemble function incorrectly processes 16-bit instructions, leading to an attempt to read data from an unauthorized memory location an out-of-bounds read. A remote attacker could exploit this by providing specially crafted bytecode ...

capstone: Capstone: Heap buffer overflow with potential code execution

A flaw was found in Capstone, a disassembly framework. The SH floating-point decoders in arch/SH/SHDisassembler.c do not correctly validate the size of the operands array when processing certain instructions. This vulnerability allows a local attacker to provide specially crafted SH2A FPU bytecod...

CVE-2026-55893

A flaw was found in Capstone, a disassembly framework. The SH floating-point decoders in arch/SH/SHDisassembler.c do not correctly validate the size of the operands array when processing certain instructions. This vulnerability allows a local attacker to provide specially crafted SH2A FPU bytecod...

CVE-2026-55894

A flaw was found in Capstone, a disassembly framework. The shdisassemble function incorrectly processes 16-bit instructions, leading to an attempt to read data from an unauthorized memory location an out-of-bounds read. A remote attacker could exploit this by providing specially crafted bytecode ...

CVE-2026-49263

A flaw was found in Capstone, a disassembly framework, affecting its WebAssembly WASM backend. A remote attacker could exploit this by providing a specially crafted brtable instruction. This could lead to a denial of service, where the disassembler gets stuck in a loop, or cause parser...