CVE-2016-7151
Capstone SEGV caused by a read memory access
CVE-2016-7151 is a medium vulnerability (CVSS 5.5) in Capstone-engine Capstone, published May 15, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.07%, the 64th percentile. Fixed in capstone 4.0.0.
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Record
CVE-2016-7151- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Record
CVE-2016-7151- Updated
- 2026-11-02
EUVDEUVD-2019-0161 No score
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Record
EUVD-2019-0161- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xx4j-rvcc-2vhr
Capstone SEGV caused by a read memory access
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Record
GHSA-xx4j-rvcc-2vhr- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Record
CVE-2016-7151- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-7151
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Record
DEBIAN-CVE-2016-7151- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGHSA-xx4j-rvcc-2vhr
Capstone SEGV caused by a read memory access
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Record
GHSA-xx4j-rvcc-2vhr- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVPYSEC-2019-242
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Record
PYSEC-2019-242- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-7151
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Record
UBUNTU-CVE-2016-7151- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
capstonePyPI |
before 4.0.0 | 4.0.0 |
capstoneDebian:12 |
before 4.0.2-2 | 4.0.2-2 |
capstoneDebian:13 |
before 4.0.2-2 | 4.0.2-2 |
capstoneDebian:14 |
before 4.0.2-2 | 4.0.2-2 |
capstonePyPI |
before 4.0.0, plus listed versions 2.02.13.03.0.13.0.2 Show 5 moreShow less3.0.33.0.43.0.53.0.5.post13.0.5rc2 |
4.0.0 |
capstoneUbuntu:16.04:LTS |
All versions, plus listed versions 3.0.4-0.13.0.4-0.2 |
None known |
capstoneUbuntu:18.04:LTS |
All versions, plus listed versions 3.0.4-33.0.4-5 |
None known |
capstoneUbuntu:20.04:LTS |
All versions, plus listed versions 4.0.1+really+3.0.5-14.0.1+really+3.0.5-1build1 |
None known |
capstoneUbuntu:22.04:LTS |
All versions, plus listed versions 4.0.2-34.0.2-3build14.0.2-5 |
None known |
capstoneUbuntu:24.04:LTS |
All versions, plus listed versions 4.0.2-54.0.2-5ubuntu14.0.2-5.14.0.2-5.1build1 |
None known |
capstoneUbuntu:25.10 |
All versions, plus listed versions 5.0.5-15.0.6-1 |
None known |
capstoneUbuntu:26.10 |
All versions, plus listed versions 5.0.7-25.0.9-1 |
None known |
capstoneUbuntu:26.04:LTS |
All versions, plus listed versions 5.0.6-15.0.6-1build15.0.7-2 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/aquynh/capstone/pull/725
nvd.nist.gov/vuln/detail/CVE-2016-7151
security-tracker.debian.org/tracker/CVE-2016-7151
ubuntu.com/security/CVE-2016-7151
cve.org/CVERecord?id=CVE-2016-7151