CA
Product
capstone
by capstone-engine · last CVE Aug 20, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 4Low 1
Watch

Add capstone to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-68114
9.8
0%
Dec 17
Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
Affected: <= 6.0.0-Alpha5
CVE-2017-6952
8.8
1%
Mar 16
Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a…
Affected: through 3.0.4
CVE-2025-67873
7.8
0%
Dec 17
Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
Affected: <= 6.0.0-Alpha5
CVE-2026-55893
7.3
0%
Aug 20
Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode
Affected: < 6.0.0-Alpha10
CVE-2026-55894
6.8
0%
Aug 20
Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode
Affected: < 6.0.0-Alpha10
CVE-2026-47143
5.9
0%
Jul 21
Capstone has a NULL Pointer Dereference with 3DNow! opcodes
Affected: < 5.0.8; < 6.0.0-Alpha8
CVE-2016-7151
5.5
1%
May 15
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c
Affected: 3.0.4
CVE-2026-49282
5.1
0%
Aug 14
Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes
Affected: < 6.0.0-Alpha9
CVE-2026-49263
2.0
0%
Aug 14
Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization
Affected: < 6.0.0-Alpha9
Showing 9