capstone-engine capstone vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 20265

Newest CVEs

• CVE-2026-55893

  Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode

  capstone-engine · capstone

  High7.3
• CVE-2026-55894

  Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode

  capstone-engine · capstone

  Medium6.8
• CVE-2026-49263

  Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization

  capstone-engine · capstone

  Low2.0
• CVE-2026-49282

  Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes

  capstone-engine · capstone

  Medium5.1
• CVE-2026-47143

  Capstone has a NULL Pointer Dereference with 3DNow! opcodes

  capstone-engine · capstone

  Medium5.1
• CVE-2025-68114

  Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow

  capstone-engine · capstone

  Medium4.8
• CVE-2025-67873

  Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

  capstone-engine · capstone

  Medium4.8