CA
Product
capstone
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 4Low 1
Watch
Add capstone to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68114 | 9.8 | Dec 17 | Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow Affected: <= 6.0.0-Alpha5 |
| CVE-2017-6952 | 8.8 | Mar 16 | Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a… Affected: through 3.0.4 |
| CVE-2025-67873 | 7.8 | Dec 17 | Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow Affected: <= 6.0.0-Alpha5 |
| CVE-2026-55893 | 7.3 | Aug 20 | Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode Affected: < 6.0.0-Alpha10 |
| CVE-2026-55894 | 6.8 | Aug 20 | Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode Affected: < 6.0.0-Alpha10 |
| CVE-2026-47143 | 5.9 | Jul 21 | Capstone has a NULL Pointer Dereference with 3DNow! opcodes Affected: < 5.0.8; < 6.0.0-Alpha8 |
| CVE-2016-7151 | 5.5 | May 15 | Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c Affected: 3.0.4 |
| CVE-2026-49282 | 5.1 | Aug 14 | Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes Affected: < 6.0.0-Alpha9 |
| CVE-2026-49263 | 2.0 | Aug 14 | Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization Affected: < 6.0.0-Alpha9 |
Showing 9
