CVE-2025-67873: Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow
Capstone doesn't check Skipdata length, leading to csinsn.bytes heap buffer overflow
Other sources
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make csdisasm/csdisasmiter memcpy more than 24 bytes into csinsn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67873?
CVE-2025-67873 has been classified as a high severity vulnerability due to its potential for causing a heap buffer overflow.
How do I fix CVE-2025-67873?
To remediate CVE-2025-67873, upgrade to Capstone version 6.0.0-Alpha6 or later, where the vulnerability has been addressed.
What could be the impact of CVE-2025-67873?
Exploitation of CVE-2025-67873 could lead to arbitrary code execution or a crash of the application using the vulnerable library.
Which versions of Capstone are affected by CVE-2025-67873?
CVE-2025-67873 affects Capstone versions from 6.0.0-Alpha5 and earlier.
Was there any known attack using CVE-2025-67873?
As of now, there are no publicly reported attacks specifically exploiting CVE-2025-67873.