CVE-2025-67873
Medium
Description
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.
SeverityMedium
CVSS4.8
Exploit probability—
ProductCapstone
PublishedDec 17, 2025
First seenDec 17, 2025
Weakness typeCWE-122CWE-122
How to fix
Update
- capstone-engine capstone6.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| capstone-engine capstone | v < 6.0.0, 6.0.0 | 6.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.