CVE-2017-6952: Capstone Integer overflow

May 17, 2022 (updated November 21, 2024)

Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.

References

github.com/advisories/GHSA-3v99-hpv7-9hh9
github.com/aquynh/capstone/commit/6fe86eef621b9849f51a5e1e5d73258a93440403
github.com/capstone-engine/capstone
github.com/pypa/advisory-database/tree/main/vulns/capstone/PYSEC-2017-113.yaml
nvd.nist.gov/vuln/detail/CVE-2017-6952

Code Behaviors & Features

Detect and mitigate CVE-2017-6952 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →