GHSA-3v99-hpv7-9hh9HighCVSS 8.8

Capstone Integer overflow

Published
May 17, 2022
Last Modified
November 21, 2024

🔗 CVE IDs covered (1)

📋 Description

Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.

🎯 Affected products1

  • pip/capstone:< 3.0.5rc2

🔗 References (4)