Buffer Overflow Vulnerability in Capstone Disassembly Framework

CVE-2025-68114

What is CVE-2025-68114?

The Capstone Disassembly Framework has a buffer overflow vulnerability affecting versions 6.0.0-Alpha5 and earlier. The flaw is due to an unchecked vsnprintf return in the SStream_concat function, which can allow an attacker to manipulate the stream's index leading to potential stack buffer underflows or overflows. This condition occurs when subsequent writes are executed. The issue has been addressed in the latest commits, ensuring safer memory operations within the framework.

References