CVE-2017-6952: Capstone-Engine Capstone

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or possibly have unspecified other impact via a large value.

Affected products

• Capstone-Engine Capstone: up to and including 3.0.4

Published 2017-03-16. Last modified 2026-06-17.