Most recent entries from all

CVE-2025-68114 — Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow

2026-10-07T19:41:02.297192+00:00

Affected: capstone-engine capstone

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.

RHSA-2026:4898 — security update for capstone

2026-10-07T19:41:02.297328+00:00

security update for capstone

RHSA-2026:5123 — Red Hat Security Advisory: capstone security update

2026-10-07T19:41:02.297368+00:00

capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. capstone: Capstone: Memory corruption via unchecked vsnprintf return