CVE-2025-68114CWE-120CWE-124

CVE-2025-68114

Medium · published December 18, 2025

CVSS v3.1
4.8
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-124 · Buffer Underwrite ('Buffer Underflow')
Published
2025-12-18T03:16Z
Affected products (6)
ProductVersionsFixed in
capstone-engine/capstone< 6.0.06.0.0
capstone-engine/capstoneall versions—
capstone-engine/capstoneall versions—
capstone-engine/capstoneall versions—
capstone-engine/capstoneall versions—
capstone-engine/capstoneall versions—
References (3)
https://github.com/capstone-engine/capstone/commit/2c7797182a1618be12017d7d41e0b6581d5d529e · [email protected]https://github.com/capstone-engine/capstone/security/advisories/GHSA-85f5-6xr3-q76r · [email protected]https://github.com/capstone-engine/capstone/security/advisories/GHSA-85f5-6xr3-q76r · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 17 DEC 21:14Z
    Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
    cvelistv5