7.8

CVE-2025-67873

Exploit

Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Capstone-engine ≫ Capstone Version < 6.0.0
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha1
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha2
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha3
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha4
Capstone-engine ≫ Capstone Version6.0.0 Updatealpha5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.089
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
security-advisories@github.com 4.8 1.3 3.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

https://github.com/capstone-engine/capstone/security/advisories/GHSA-hj6g-v545-v7jg
Vendor Advisory
Exploit
https://github.com/capstone-engine/capstone/commit/cbef767ab33b82166d263895f24084b75b316df3
Patch