4.8

CVSS3.1

CVE-2025-68114 - Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overfl…

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a16…

📅 Published: Dec. 17, 2025, 9:14 p.m. 🔄 Last Modified: Dec. 17, 2025, 9:14 p.m.

4.8

CVSS3.1

CVE-2025-67873 - Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767…

📅 Published: Dec. 17, 2025, 9:12 p.m. 🔄 Last Modified: Dec. 17, 2025, 9:12 p.m.

7.5

CVSS3.1

CVE-2025-67493 - Homarr issing input sanitization and possible privilege escalation through ldap search query inject…

Homarr is an open-source dashboard. Prior to version 1.45.3, it was possible to craft an input which allowed privilege escalation and getting access to groups of other users due to missing sanitization of inputs in ldap search query. The vulnerability could impact all instances using ldap authentic…

📅 Published: Dec. 17, 2025, 9:09 p.m. 🔄 Last Modified: Dec. 17, 2025, 9:09 p.m.

0.0

CVE-2025-43514 -

The issue was addressed with improved handling of caches. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected user data.