CVE-2016-7151
UnknownEPSS 0.97%
Last modified
CVE-2016-7151 is a vulnerability of currently unknown severity. Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.. EPSS estimates a 0.97% chance of exploitation in the next 30 days.
Description
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Capstone-Engine | Capstone | 3.0.4 |
References
- https://github.com/aquynh/capstone/commit/87a25bb543c8e4c09b48d4b4a6c7db31ce58df06Patch, Third Party Advisory
- https://github.com/aquynh/capstone/pull/725Exploit, Third Party Advisory
- https://github.com/aquynh/capstone/commit/87a25bb543c8e4c09b48d4b4a6c7db31ce58df06Patch, Third Party Advisory
- https://github.com/aquynh/capstone/pull/725Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-7151?
Capstone 3.0.4 has an out-of-bounds vulnerability (SEGV caused by a read memory access) in X86_insn_reg_intel in arch/X86/X86Mapping.c.
How severe is CVE-2016-7151?
Severity scoring for CVE-2016-7151 is pending analysis. The EPSS model estimates a 0.97% probability of exploitation in the next 30 days.
How do I fix CVE-2016-7151?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-7145The m_authenticate function in ircd/m_authenticate.c in nefa…
- CVE-2016-7146MoinMoin 1.9.8 allows remote attackers to conduct "JavaScrip…
- CVE-2016-7147Cross-site scripting (XSS) vulnerability in the manage_findR…
- CVE-2016-7148MoinMoin 1.9.8 allows remote attackers to conduct "JavaScrip…
- CVE-2016-7149Cross-site scripting (XSS) vulnerability in b2evolution 6.7.…
- CVE-2016-7150Cross-site scripting (XSS) vulnerability in b2evolution 6.7.…
- CVE-2016-7152The HTTPS protocol does not consider the role of the TCP con…
- CVE-2016-7153The HTTP/2 protocol does not consider the role of the TCP co…
- CVE-2016-7154Use-after-free vulnerability in the FIFO event channel code …
- CVE-2016-7155hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows loc…4.4
- CVE-2016-7156The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c i…4.4
- CVE-2016-7157The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_…4.4
Are you affected by CVE-2016-7151?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST