PyPI/capstone CVE-2017-6952: high 8.8, EPSS 1.26%

Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or po

Action: Upgrade capstone to 3.0.5rc2 or later.

pip install capstone==3.0.5rc2

Affected

Fixed versions

Sources

• osv: PYSEC-2017-113
• https://github.com/aquynh/capstone/commit/6fe86eef621b9849f51a5e1e5d73258a93440403
• http://www.securityfocus.com/bid/97323
• https://github.com/advisories/GHSA-3v99-hpv7-9hh9

CVE-2017-6952 · published 2017-03-16T21:59:00Z · modified 2026-06-10T17:00:42.745202765Z · JSON