Capstone-Engine Capstone 6.0.0 Alpha 4
Approved changes feed: RSS · Atom
cpe:2.3:a:capstone-engine:capstone:6.0.0:alpha4:*:*:*:*:*:*part: a version: 6.0.0 update: alpha4
| Vendor | Capstone Engine (eabac247-a0ca-54d5-9d26-216453081f45) |
|---|---|
| Product | Capstone (277e57fa-cbf4-548b-a0fc-5bdf6f3eaf21) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/capstone |
purl2cpe | 2026-06-01 10:12:09.033998 |
pkg:deb/ubuntu/capstone |
purl2cpe | 2026-06-01 10:12:09.033999 |
pkg:github/capstone-engine/capstone |
purl2cpe | 2026-06-01 10:12:09.034001 |
pkg:gitlab/kalilinux/capstone |
purl2cpe | 2026-06-01 10:12:09.034002 |
pkg:rpm/fedora/capstone |
purl2cpe | 2026-06-01 10:12:09.034003 |
pkg:rpm/opensuse/capstone |
purl2cpe | 2026-06-01 10:12:09.034005 |
pkg:sourceforge/capstone-engine.mirror |
purl2cpe | 2026-06-01 10:12:09.034006 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-68114 |
vulnerable | 2026-06-08 07:41:20.819976 |
Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
MEDIUM (4.8)
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.
Published: 2025-12-17T21:14:31.226Z
Updated: 2025-12-18T15:09:11.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67873 |
vulnerable | 2026-06-08 07:41:20.556776 |
Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
MEDIUM (4.8)
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.
Published: 2025-12-17T21:12:13.739Z
Updated: 2025-12-18T15:09:19.484Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.