Capstone-Engine · product
Capstone
9 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.
- Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a…
- Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
- Capstone has a NULL Pointer Dereference with 3DNow! opcodes
- Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
- Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
- Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode
- Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode
- Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes
- Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.