Buffer Overflow Vulnerability in Capstone Disassembly Framework
CVE-2025-67873

4.8MEDIUM

Key Information:

Vendor

Capstone-engine

Status
Capstone
Vendor
CVE Published:
17 December 2025

What is CVE-2025-67873?

A vulnerability in the Capstone disassembly framework arises due to inadequate bounds checking on the Skipdata length. This flaw allows a user-provided skipdata callback to manipulate functions such as cs_disasm and cs_disasm_iter, leading to potential heap buffer overflow situations. Such an overflow can occur when memcpy operations exceed 24 bytes into cs_insn.bytes, posing risks to application integrity. The issue is addressed in a commit providing a fix to enhance the framework's security.

Affected Version(s)

capstone <= 6.0.0-Alpha5

References

https://github.com/capstone-engine/capstone/security/advi...
x_refsource_CONFIRM
https://github.com/capstone-engine/capstone/commit/cbef76...
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.