Capstone-Engine

9 CVEs across 1 Capstone-Engine products. Browse Capstone-Engine vulnerabilities, severities, and proof-of-concept exploits.

Capstone-Engine products with known CVEs

ProductCVEs
Capstone9
Capstone-Engine CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-558942026-08-20Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c sh_disassemble() function computes an idx value from a ra…
CVE-2026-558932026-08-20Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and op…
CVE-2026-49282Medium5.12026-08-14Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public `cs_insn_name()` API forwards caller-supplied instruction IDs directly to…
CVE-2026-492632026-08-14Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes throu…
CVE-2026-47143Medium5.12026-07-21Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassem…
CVE-2025-68114Medium4.82025-12-17Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf…
CVE-2025-67873Medium4.82025-12-17Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make c…
CVE-2016-7151Medium5.52019-05-15Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
CVE-2017-6952High8.82017-03-16Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based…