Out-of-Bounds Access in Capstone X86 Mapping by Aquynh
CVE-2016-7151

5.5MEDIUM

Key Information:

Vendor

Capstone-engine

Status
Capstone
Vendor
CVE Published:
15 May 2019

What is CVE-2016-7151?

Capstone 3.0.4 contains a vulnerability that permits out-of-bounds memory access due to improper handling in the X86 instruction mapping component. This flaw could potentially lead to unintended consequences when processing certain inputs, making it crucial for developers to review and apply the latest security updates. For more technical insights, please refer to the pull request and commit linked in the references.

References

https://github.com/aquynh/capstone/pull/725
x_refsource_CONFIRM
https://github.com/aquynh/capstone/commit/87a25bb543c8e4c...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.