GitHub Advisoryadvisory · PyPI

GHSA-3v99-hpv7-9hh9 Capstone Integer overflow

HIGH Published 2022-05-17 Modified 2024-11-21 Official page ↗
Aliases
CVE-2017-6952
Ecosystem
PyPI
Packages
capstone
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-190
Reviewed
2024-11-21

Affected packages

• PyPI capstone: < 3.0.5rc2 → fixed in 3.0.5rc2

Description

Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.

Related

Alias · CVE (1)

  • CVE-2017-6952 Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of… vulnerability

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References