Unrated severityOSV Advisory· Published Dec 17, 2025· Updated Dec 18, 2025
Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
CVE-2025-67873
Description
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
111.0, 2.0, 2.0-rc1, …+ 1 more
- (no CPE)range: 1.0, 2.0, 2.0-rc1, …
- (no CPE)range: <= 6.0.0-Alpha5
- osv-coords9 versionspkg:rpm/almalinux/capstonepkg:rpm/almalinux/capstone-develpkg:rpm/almalinux/capstone-javapkg:rpm/almalinux/python3-capstonepkg:rpm/opensuse/capstone&distro=openSUSE%20Leap%2015.6pkg:rpm/suse/capstone&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/capstone&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP7pkg:rpm/suse/capstone&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/capstone&distro=SUSE%20Linux%20Micro%206.1
< 4.0.2-11.el9_7+ 8 more
- (no CPE)range: < 4.0.2-11.el9_7
- (no CPE)range: < 4.0.2-11.el9_7
- (no CPE)range: < 4.0.2-11.el9_7
- (no CPE)range: < 4.0.2-11.el9_7
- (no CPE)range: < 4.0.2-150500.3.3.1
- (no CPE)range: < 4.0.2-150500.3.3.1
- (no CPE)range: < 4.0.2-150500.3.3.1
- (no CPE)range: < 4.0.2-6.1
- (no CPE)range: < 4.0.2-slfo.1.1_2.1
Patches
Vulnerability mechanics
References
2- github.com/capstone-engine/capstone/commit/cbef767ab33b82166d263895f24084b75b316df3mitrex_refsource_MISC
- github.com/capstone-engine/capstone/security/advisories/GHSA-hj6g-v545-v7jgmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.