CVE-2025-67873CWE-122

CVE-2025-67873

Medium · published December 18, 2025

CVSS v3.1
4.8
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.6th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-12-18T03:16Z
Affected products (6)
ProductVersionsFixed in
capstone-engine/capstone< 6.0.06.0.0
capstone-engine/capstoneall versions—
capstone-engine/capstoneall versions—
capstone-engine/capstoneall versions—
capstone-engine/capstoneall versions—
capstone-engine/capstoneall versions—
References (3)
https://github.com/capstone-engine/capstone/commit/cbef767ab33b82166d263895f24084b75b316df3 · [email protected]https://github.com/capstone-engine/capstone/security/advisories/GHSA-hj6g-v545-v7jg · [email protected]https://github.com/capstone-engine/capstone/security/advisories/GHSA-hj6g-v545-v7jg · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 17 DEC 21:12Z
    Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
    cvelistv5