Capstone-engine vulnerabilities

Products

• Capstone 9

Newest

• capstone-engine capstone Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode CVE-2026-55893 Fix available 7.3 HighAugust 20, 2026
• capstone-engine capstone Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode CVE-2026-55894 Fix available 6.8 MediumAugust 20, 2026
• capstone-engine capstone Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization CVE-2026-49263 Fix available 2.0 LowAugust 14, 2026
• capstone-engine capstone Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes CVE-2026-49282 Fix available 5.1 MediumAugust 14, 2026
• capstone-engine capstone Capstone has a NULL Pointer Dereference with 3DNow! opcodes CVE-2026-47143 Fix available 5.1 MediumMay 26, 2026
• capstone-engine capstone Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow CVE-2025-68114 Fix available 4.8 MediumDecember 17, 2025
• capstone-engine capstone Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow CVE-2025-67873 Fix available 4.8 MediumDecember 17, 2025
• capstone-engine capstone Capstone SEGV caused by a read memory access CVE-2016-7151 Fix available 5.5 MediumMay 15, 2019
• capstone-engine capstone Capstone Integer overflow CVE-2017-6952 Fix available 8.8 HighMarch 16, 2017