Capstone-Engine Capstone

Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow

Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.

Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

Capstone has a NULL Pointer Dereference with 3DNow! opcodes

Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.