What’s Vulnerable › Products

capstone-engine capstone vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your capstone-engine capstone version is affected

Latest capstone-engine capstone vulnerabilities

• CVE-2026-55894 — Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode (CVSS 6.8)
• CVE-2026-55893 — Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode (CVSS 7.3)
• CVE-2026-49282 — Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes (CVSS 5.1)
• CVE-2026-49263 — Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization (CVSS 2.0)
• CVE-2026-47143 — Capstone has a NULL Pointer Dereference with 3DNow! opcodes (CVSS 5.9)
• CVE-2025-68114 — Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow (CVSS 9.8)
• CVE-2025-67873 — Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow (CVSS 7.8)
• CVE-2016-7151 — (CVSS 5.5)
• CVE-2017-6952 — (CVSS 8.8)