Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• capstone-engine capstone3.0.4

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2025-68114Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
  39Monitor
• CVE-2017-6952Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of s
  35Monitor
• CVE-2025-67873Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
  31Monitor
• CVE-2026-55893Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode
  29Monitor
• CVE-2026-55894Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode
  27Monitor
• CVE-2026-47143Capstone has a NULL Pointer Dereference with 3DNow! opcodes
  23Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.