Ccapstone-engine

Products

Exploited and recent CVEs

• CVE-2026-55893 High 7.3 Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode 0.2%
• CVE-2026-55894 Medium 6.8 Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode 0.2%
• CVE-2026-49263 Low 2.0 Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization 0.2%
• CVE-2026-49282 Medium 5.1 Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes 0.2%
• CVE-2026-47143 Medium 5.1 Capstone has a NULL Pointer Dereference with 3DNow! opcodes 0.5%
• CVE-2025-68114 Medium 4.8 Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow 0.2%
• CVE-2025-67873 Medium 4.8 Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow 0.2%