Advisories · Technology
capstone.
Every CVE that names capstone among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode
- capstone
- Memory corruption
- CVSS 6.8 Medium
Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode
- capstone
- Memory corruption
- CVSS 2.0 Low
Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization
- capstone
- CWE-197
- CVSS 5.1 Medium
Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes
- capstone
- Memory corruption
- CWE-129
- CVSS 4.8 Medium
Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
- capstone
- Memory corruption
- CVSS 4.8 Medium
Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
- capstone
- Memory corruption