CVE-2025-68114: Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
Capstone doesn't check vsnprintf return in SStreamconcat, allows stack buffer underflow and overflow
Other sources
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious csoptmem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Capstoneto a version that resolves this vulnerability.Patch 2c7797182a1618be12017d7d41e0b6581d5d529e
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68114?
The severity of CVE-2025-68114 is considered high due to the potential for stack buffer underflow/overflow.
How do I fix CVE-2025-68114?
To fix CVE-2025-68114, upgrade to version 6.0.0-Alpha6 or later of the Capstone disassembly framework.
What systems are affected by CVE-2025-68114?
CVE-2025-68114 affects all versions of Capstone from 6.0.0-Alpha5 and earlier.
What type of vulnerability is CVE-2025-68114?
CVE-2025-68114 is classified as a stack buffer underflow/overflow vulnerability.
Can CVE-2025-68114 be exploited remotely?
Yes, CVE-2025-68114 can potentially be exploited remotely if an attacker can manipulate the input to the affected functions.