Alpine/capstone: critical 9.8
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past th
Action: Upgrade capstone to 5.0.7-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.7-r0 | - |
Fixed versions
| 5.0.7-r0 |
Sources
- osv: ALPINE-CVE-2025-68114#Alpine:v3.24/capstone
- https://security.alpinelinux.org/vuln/CVE-2025-68114
published · modified · JSON