Description

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.

INFO

Published Date :

2025-12-17T21:14:31.226Z

Last Modified :

2025-12-18T15:09:11.561Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-68114 vulnerability.

Vendors Products
Capstone-engine
  • Capstone
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-68114.

URL Resource
https://github.com/capstone-engine/capstone/commit/2c7797182a1618be12017d7d41e0b6581d5d529e cve-icon cve-icon
https://github.com/capstone-engine/capstone/security/advisories/GHSA-85f5-6xr3-q76r cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact