CyberRota Analysis
AI-GeneratedThe Capstone disassembly framework prior to version 6.0.0-Alpha9 is vulnerable due to inadequate bounds checks in the M68K and RISCV backends, allowing an attacker to supply invalid instruction IDs that can lead to out-of-bounds reads and process crashes. This vulnerability primarily affects applications that expose the `cs_insn_name()` API to untrusted input, resulting in potential availability loss. Developers and organizations utilizing Capstone for M68K or RISCV architectures should prioritize upgrading to the patched version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public `cs_insn_name()` API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have missing or incomplete bounds checks. On a Capstone handle opened for M68K or RISCV, a caller-controlled invalid instruction ID can trigger an out-of-bounds read and crash the process. The demonstrated impact is availability loss in applications or bindings that expose instruction-name lookup to untrusted IDs. No code execution or data disclosure was demonstrated. Version 6.0.0-Alpha9 patches the issue.