All 7 CVE vulnerabilities found in capstone, with AI-generated Chinese analysis, references, and POCs.
Vendor: capstone-engine
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-55893 | Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode CWE-122 | 7.3 | High | 2026-08-20 |
| CVE-2026-55894 | Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode CWE-125 | 6.8 | Medium | 2026-08-20 |
| CVE-2026-49263 | Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization CWE-197 | 2.0 | Low | 2026-08-14 |
| CVE-2026-49282 | Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes CWE-125 | 5.1 | Medium | 2026-08-14 |
| CVE-2026-47143 | Capstone has a NULL Pointer Dereference with 3DNow! opcodes CWE-476 | 5.1 | Medium | 2026-07-21 |
| CVE-2025-68114 | Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow CWE-124 | 4.8 | Medium | 2025-12-17 |
| CVE-2025-67873 | Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow CWE-122 | 4.8 | Medium | 2025-12-17 |
All 7 known CVE vulnerabilities affecting capstone with full Chinese analysis, references, and POCs where available.