A vulnerability in Capstone's disassembly framework, specifically in the SHDisassembler.c file, allows for a segmentation fault when processing crafted bytecode. This issue is fixed in version 6.0.0-Alpha10. The vulnerability can cause potential crashes in systems using Capstone's disassembly framework with specific architectures and modes. Defenders responsible for systems using Capstone's disassembly fr [truncated]
A vulnerability in Capstone, a disassembly framework, allows for an out-of-bounds read when using the `cs_insn_name()` API with a caller-controlled invalid instruction ID on M68K or RISCV architectures. This can lead to a process crash, impacting availability in applications or bindings that expose instruction-name lookup to untrusted IDs. The issue was patched in version 6.0.0-Alpha9.
The Capstone disassembly framework has an availability and parser-integrity issue in its WebAssembly backend prior to version 6.0.0-Alpha9. The issue arises from the public `cs_disasm()` and `cs_disasm_iter()` APIs accepting attacker-controlled raw WASM instruction bytes. For specific `br_table` instruction lengths, the decoder may accumulate and return incorrect instruction sizes, leading to repeated dec [truncated]
A NULL pointer dereference vulnerability exists in the Capstone disassembly framework, affecting versions prior to 6.0.0-Alpha8 and 5.0.8. The vulnerability occurs in the `modRMRequired()` and `decode()` functions when disassembling 3DNow! opcodes (`0F 0F`). A remote attacker can crash any application using the reduced X86 Capstone library by supplying a crafted input containing the 4-byte sequence `0F 0F [truncated]
