Capstone SEGV caused by a read memory access

published 2019-05-15 7 y ago modified 2026-06-17 4 mo ago also GHSA-xx4j-rvcc-2vhr , PYSEC-2019-242 , EUVD-2019-0161

cvss: 5.5; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 1.1%; EPSS 1.1% chance of exploitation in 30 days, percentile 65%
public exploits: 0; none known

Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.

Patch / fix

fixed in 1 distros 1 links 1

pypi capstone 4.0.0

capstone Debian 14, Debian 13, Debian 12 4.0.2-2

debian advisories DEBIAN-CVE-2016-7151

github.com/aquynh/capstone@87a25bb commit

Exploit prediction

1.07% chance of exploitation in the next 30 days, higher than 65% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

github.com https://github.com/aquynh/capstone/pull/725 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	3.0	5.5	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD	2.0	4.3	AV:N/AC:M/Au:N/C:N/I:N/A:P
GitHub	3.0	5.5	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected packages

ecosystem	package	affected	fixed in
pypi	capstone	<4.0.0	4.0.0

Classification

Weakness

CWE-125 Out-of-bounds Read

References

github.com /aquynh/capstone/pull/725
web, exploit, third-party-advisory, evidence
github.com /aquynh/capstone/commit/87a25bb543c8e4c09b48d4b4a6c7db31ce58df06
web, patch, third-party-advisory
nvd.nist.gov /vuln/detail/CVE-2016-7151
advisory
github.com /capstone-engine/capstone
package
github.com /pypa/advisory-database/tree/main/vulns/capstone/PYSEC-2019-242.yaml
web
github.com /advisories/GHSA-xx4j-rvcc-2vhr
advisory

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary