CVE-2025-67873

Published: Dec 17, 2025Modified: Jan 2, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Affected (6)

Products: Capstone Engine: Capstone

Capstone Engine

1 product

Capstone

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Capstone Engine Capstone	Before 6.0.0
Capstone Engine Capstone	Version 6.0.0 alpha1
Capstone Engine Capstone	Version 6.0.0 alpha2
Capstone Engine Capstone	Version 6.0.0 alpha3
Capstone Engine Capstone	Version 6.0.0 alpha4
Capstone Engine Capstone	Version 6.0.0 alpha5

Related CWEs

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

References (3)

https://github.com/capstone-engine/capstone/commit/cbef767ab33b82166d263895f24084b75b316df3

Source: security-advisories@github.com

Patch

https://github.com/capstone-engine/capstone/security/advisories/GHSA-hj6g-v545-v7jg

Source: security-advisories@github.com

ExploitVendor Advisory

https://github.com/capstone-engine/capstone/security/advisories/GHSA-hj6g-v545-v7jg

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitVendor Advisory

Timeline

No history available yet.