CVE-2025-68114

Name of the Vulnerable Software and Affected Versions Capstone versions 6.0.0-Alpha5 and prior

Description An unchecked return value from the vsnprintf function within SStream concat can lead to a stack buffer underflow or overflow. A malicious cs opt mem.vsnprintf input can cause SStream’s index to become negative or exceed the buffer boundaries, resulting in a stack buffer underflow/overflow during subsequent write operations.

Recommendations Update to a version later than 6.0.0-Alpha5.