PyPI/capstone CVE-2017-6952: high 8.8, EPSS 1.26%

Capstone Integer overflow

Action: Upgrade capstone to 3.0.5rc2 or later.

pip install capstone==3.0.5rc2

Affected

Fixed versions

Sources

• osv: GHSA-3v99-hpv7-9hh9
• https://nvd.nist.gov/vuln/detail/CVE-2017-6952
• https://github.com/aquynh/capstone/commit/6fe86eef621b9849f51a5e1e5d73258a93440403
• https://github.com/capstone-engine/capstone
• https://github.com/pypa/advisory-database/tree/main/vulns/capstone/PYSEC-2017-113.yaml

CVE-2017-6952 · published 2022-05-17T02:51:51Z · modified 2024-11-21T22:42:12.715289Z · JSON