EUVD-2025-203996

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make csdisasm/csdisasmiter memcpy more than 24 bytes into csinsn.bytes, causing a heap buffer overflow in the disassembly path. Commit...

CVE-2025-67873

Capstone CVE-2025-67873 affects the disassembly framework in 6.0.0-Alpha5 and earlier. A missing bounds check on a user-provided skipdata callback allows memcpy beyond 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. The exploit path and impact are described in...

CVE-2025-67873 Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make csdisasm/csdisasmiter memcpy more than 24 bytes into csinsn.bytes, causing a heap buffer overflow in the disassembly path. Commit...

CVE-2025-67873: Heap-based Buffer Overflow

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make csdisasm/csdisasmiter memcpy more than 24 bytes into csinsn.bytes, causing a heap buffer overflow in the disassembly path. Commit...

PT-2025-51923

Name of the Vulnerable Software and Affected Versions Capstone versions 6.0.0-Alpha5 and prior Description An unchecked return value from the vsnprintf function within SStream concat can lead to a stack buffer underflow or overflow. A malicious cs opt mem.vsnprintf input can cause SStream’s index...

PT-2025-51920

Name of the Vulnerable Software and Affected Versions Capstone versions 6.0.0-Alpha5 and prior Description Capstone, a disassembly framework, contains a flaw where the length of skipdata is not properly validated. A user-provided skipdata callback can trigger a heap buffer overflow in the...

Capstone 安全漏洞

Capstone is a cross-platform disassembly framework from Capstone, Inc. that supports use for binary analysis and reverse engineering of secure communications, among other things. A security vulnerability exists in Capstone 6.0.0-Alpha5 and earlier versions, which stems from Skipdata length not...

CVE-2025-68114: Buffer Underwrite

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit...

Capstone 安全漏洞

Capstone is a suite of cross-platform disassembly frameworks from Capstone, Inc. that supports use for binary analysis and reverse engineering of secure communications, among other things. A security vulnerability exists in Capstone 6.0.0-Alpha5 and earlier versions, which stems from an unchecked...

ApexPlanet-Task5-capstone-webapp-pentest

🛡️ Capstone Project — Web Application & Network Penetration Test...

EUVD-2019-0161

Malware in sbrugna...

EUVD-2017-0143

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2016-7151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone 3.0.4 has an out-of-bounds vulnerability SEGV caused by a read memory access in X86insnregintel in arch/X86/X86Mapping.c. CVE-2016-7151 Note that Nessu...

capstone:fuzz_disasmv5: Use-of-uninitialized-value in DecodeCrosspathX3

Detailed Report: https://oss-fuzz.com/testcase?key=5835948544294912 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmv5 Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DecodeCrosspathX3 decodeToMCInst4...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in ARM_printer

Detailed Report: https://oss-fuzz.com/testcase?key=4743896066752512 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ARMprinter csdisasm fuzzdisasm.c...

Buffer Overflow

Overview capstone is a Capstone disassembly engine Affected versions of this package are vulnerable to Buffer Overflow via tricore UB. Remediation Upgrade capstone to version 6.0.0a1 or higher. References - GitHub Commit...

capstone:fuzz_disasmnext: Heap-buffer-overflow in readBytes48

Detailed Report: https://oss-fuzz.com/testcase?key=4815842800369664 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzerasancapstone Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5020000000b6 Crash State: readBytes48...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in MCOperand_isImm

Detailed Report: https://oss-fuzz.com/testcase?key=6255317965406208 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: MCOperandisImm AArch64addcsdetail...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in MCOperand_isReg

Detailed Report: https://oss-fuzz.com/testcase?key=6221267548569600 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: MCOperandisReg printOperand...

capstone:fuzz_disasmnext: Use-of-uninitialized-value in ARM_printer

Detailed Report: https://oss-fuzz.com/testcase?key=6223041365147648 Project: capstone Fuzzing Engine: libFuzzer Fuzz Target: fuzzdisasmnext Job Type: libfuzzermsancapstone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ARMprinter csdisasm fuzzdisasm.c...