Riskcovery

CVE-2025-68114

Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow

State
Published
Severity
4.8 Medium
Published
Dec 17, 2025
Updated
Dec 18, 2025
Reserved
Dec 15, 2025

Read the record on cve.org

Description

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.

Scores

CVSSScoreVectorSource
3.14.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:LGitHub_M

Weaknesses

  • CWE-124 Buffer Underwrite ('Buffer Underflow')
  • CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

ProductVersions
capstonecapstone-engine
  • <= 6.0.0-Alpha5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.