Security: capstone-engine/capstone
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Out-of-bounds read in SH disassembler: missing else-return after decode_long() leaks a dirty op_count, causing SH_printInst to read past the operands arrayGHSA-5q63-4654-94v6 published
Aug 6, 2026 by Rot127High -
ARM check_pop_return use-of-uninitialized-valueGHSA-8qp8-2vg2-8mr4 published
Aug 13, 2026 by Rot127Moderate -
Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecodeGHSA-gf2c-xwcp-hvf4 published
Jun 18, 2026 by Rot127Moderate -
Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecodeGHSA-3hpv-wr3j-rxwh published
Jun 18, 2026 by Rot127Moderate -
Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashesGHSA-jrw4-wj52-2vw8 published
May 27, 2026 by Rot127Moderate -
Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronizationGHSA-5m9f-vqcm-g5pr published
May 27, 2026 by Rot127Low -
NULL Pointer Dereference with 3DNow! opcodesGHSA-289w-cm54-fgrm published
May 19, 2026 by Rot127Moderate -
Xtensa disassembler triggers undefined behavior via 48-byte read into uint64_tGHSA-ccqm-jp9r-c59w published
May 15, 2026 by Rot127Low -
Unchecked vsnprintf return in SStream_concat allows stack buffer underflow&overflowGHSA-85f5-6xr3-q76r published
Dec 17, 2025 by Rot127Moderate -
Skipdata length unchecked leads to cs_insn.bytes heap buffer overflowGHSA-hj6g-v545-v7jg published
Dec 17, 2025 by Rot127Moderate