CVE-2025-67873

Name of the Vulnerable Software and Affected Versions Capstone versions 6.0.0-Alpha5 and prior

Description Capstone, a disassembly framework, contains a flaw where the length of skipdata is not properly validated. A user-provided skipdata callback can trigger a heap buffer overflow in the disassembly path by allowing cs disasm/cs disasm iter to write beyond the allocated memory in cs insn.bytes, specifically exceeding 24 bytes. This occurs due to insufficient bounds checking.

Recommendations Update to a version later than 6.0.0-Alpha5.