Approved changes feed: RSS · Atom
cpe:2.3:a:capstone-engine:capstone:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Capstone Engine (eabac247-a0ca-54d5-9d26-216453081f45) |
|---|---|
| Product | Capstone (277e57fa-cbf4-548b-a0fc-5bdf6f3eaf21) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/capstone |
purl2cpe | 2026-06-01 10:12:09.033562 |
pkg:deb/ubuntu/capstone |
purl2cpe | 2026-06-01 10:12:09.033565 |
pkg:github/capstone-engine/capstone |
purl2cpe | 2026-06-01 10:12:09.033568 |
pkg:gitlab/kalilinux/capstone |
purl2cpe | 2026-06-01 10:12:09.033571 |
pkg:rpm/fedora/capstone |
purl2cpe | 2026-06-01 10:12:09.033573 |
pkg:rpm/opensuse/capstone |
purl2cpe | 2026-06-01 10:12:09.033576 |
pkg:sourceforge/capstone-engine.mirror |
purl2cpe | 2026-06-01 10:12:09.033579 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-47143 |
vulnerable | 2026-07-29 00:54:59.839387 |
Capstone has a NULL Pointer Dereference with 3DNow! opcodes
MEDIUM (5.1)
Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassembling 3DNow! opcodes (`0F 0F`) in builds compiled with `-DCAPSTONE_X86_REDUCE`, allowing a remote attacker to crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F <modrm> <imm8>`. Versions 6.0.0-Alpha8 and 5.0.8 patch the issue.
Published: 2026-07-21T20:10:44.476Z
Updated: 2026-07-22T13:42:55.326Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68114 |
vulnerable | 2026-06-08 07:41:20.819527 |
Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
MEDIUM (4.8)
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.
Published: 2025-12-17T21:14:31.226Z
Updated: 2025-12-18T15:09:11.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67873 |
vulnerable | 2026-06-08 07:41:20.553246 |
Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
MEDIUM (4.8)
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.
Published: 2025-12-17T21:12:13.739Z
Updated: 2025-12-18T15:09:19.484Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6952 |
vulnerable | 2026-06-08 05:09:55.186986 |
Details available
Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.
Published: 2017-03-16T21:00:00.000Z
Updated: 2024-08-05T15:49:01.349Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.