CA
Vendor
capstone-engine
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55893 | CA capstone capstone-engine | 7.3 | Aug 20 | Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode |
| CVE-2026-55894 | CA capstone capstone-engine | 6.8 | Aug 20 | Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode |
| CVE-2026-49263 | CA capstone capstone-engine | 2.0 | Aug 14 | Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization |
| CVE-2026-49282 | CA capstone capstone-engine | 5.1 | Aug 14 | Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes |
| CVE-2026-47143 | CA capstone capstone-engine | 5.9 | Jul 21 | Capstone has a NULL Pointer Dereference with 3DNow! opcodes |
| CVE-2025-68114 | CA capstone capstone-engine | 9.8 | Dec 17 | Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow |
| CVE-2025-67873 | CA capstone capstone-engine | 7.8 | Dec 17 | Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow |
| CVE-2016-7151 | CA Capstone Capstone-engine | 5.5 | May 15 | Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c |
| CVE-2017-6952 | CA Capstone Capstone-engine | 8.8 | Mar 16 | Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a… |