macOS
brew install zydislocal Homebrew formula metadata
brew
Fast and lightweight x86/x86_64 disassembler library. Version 4.1.1 via Homebrew; verified from local package data.
install
brew install zydislocal Homebrew formula metadata
sudo apk add zydisAlpine Linux edge package indexes · zydis · source: dl-cdn.alpinelinux.org
sudo apt install libzydis-devDebian stable package indexes · libzydis-dev · source: deb.debian.org
sudo dnf install zydisFedora Rawhide package metadata · zydis · source: dl.fedoraproject.org
nix profile install nixpkgs#zydisnixpkgs package indexes · pkgs/by-name/zy/zydis/package.nix · source: api.github.com
sudo pacman -S zydisArch Linux sync databases · zydis · source: geo.mirror.pkgbuild.com
overview
Fast and lightweight x86/x86_64 disassembler library
history
Zydis is Zyantific's compact x86 and x86-64 decoder, disassembler, formatter, and code-generation library. It is aimed at tooling that needs instruction-level detail without dragging in a large runtime or platform-specific dependency stack.
The public GitHub repository was created on 2014-10-24, and Zyantific's own 2017 project post described Zydis v2 work as arriving three years after the library's initial release. Early Zydis was a C++11 x86 disassembler; the v2 cycle was a full rewrite that moved the public interface to C99 so it could be used from more languages, drivers, embedded environments, and other low-level contexts.
Zydis evolved from a decoder/disassembler into a broader instruction tooling library. The README now describes it as both a disassembler and code-generation library, while the 2022 v4 project post introduced code generation and rewriting support alongside API simplifications and operand-decoding changes.
The project has kept a package-friendly shape: a CMake build, an optional single-header/single-source amalgamated distribution, no third-party runtime dependency, official documentation, small CLI tools such as ZydisInfo and ZydisDisasm, and bindings or front ends for Rust, Python, and zasm.
Zydis adoption is unusually visible for a low-level C library because the README names major open-source consumers including x64dbg, Mozilla Firefox, and WebKit. Those users point to its niche: reverse engineering, debugging, browser JavaScript engines, binary analysis, and code-rewriting tools that need accurate x86 instruction metadata.
Its packaging spread follows the same pattern. The README documents availability through multiple package ecosystems and highlights support for Windows, macOS, Linux, BSDs, UEFI, user mode, and kernel mode, making it attractive to package maintainers who want one small library that builds across uncommon targets.
Developers use Zydis to decode byte buffers into instruction structures, format human-readable Intel or AT&T assembly, inspect operands and implicit register or flag effects, and, in newer APIs, encode or rewrite instructions. The bundled examples show direct disassembly and instruction encoding, while ZydisInfo is useful for inspecting the metadata Zydis exposes for a single instruction.
In package-manager terms, Zydis is usually consumed as headers, a library, and a couple of inspection utilities rather than as an end-user application. It sits underneath debuggers, disassemblers, binary instrumentation systems, emulator-adjacent tooling, and security research workflows.
Zydis matters to package nerds because it is a modern example of a highly specialized systems library that succeeds by being easy to vendor, package, and cross-compile. The no-libc/no-malloc posture and amalgamated release option explain why downstreams can embed it in places where ordinary libraries are too heavy.
It also shows how package visibility can come from downstream trust rather than a flashy command line. A small formula exposes a library that quietly supports reverse-engineering tools, browser engines, and low-level diagnostics across several operating systems.
security posture
library-like package without higher-risk signals.
green risk · low confidence · appliance
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
ZydisDisasm | cli | global executable | |
ZydisInfo | cli | global executable |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://github.com/zyantific/zydis
install metadata
| Package key | brew:zydis |
|---|---|
| Version | 4.1.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/zydis |
| Homepage | https://zydis.re |
| Repository | https://github.com/zyantific/zydis |
| Upstream docs | https://doc.zydis.re/ |
| License | MIT |
| Source archive | https://github.com/zyantific/zydis/archive/refs/tags/v4.1.1.tar.gz |
| Dependencies | zycore-c |
| Build dependencies | cmake, ronn-ng |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | zydis |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
libzydis-dev 4.1.1-1
fast and lightweight x86/x86-64 disassembler library - development
sudo apt install libzydis-devlibzydis-doc 4.1.1-1
fast and lightweight x86/x86-64 disassembler library - documentation
sudo apt install libzydis-doclibzydis4.1 4.1.1-1
fast and lightweight x86/x86-64 disassembler library
sudo apt install libzydis4.1zydis-tools 4.1.1-1
fast and lightweight x86/x86-64 disassembler library - tools
sudo apt install zydis-toolszydis
nix profile install nixpkgs#zydislibzydis-dev 4.0.0-2.1build2
fast and lightweight x86/x86-64 disassembler library - development
sudo apt install libzydis-devlibzydis-doc 4.0.0-2.1build2
fast and lightweight x86/x86-64 disassembler library - documentation
sudo apt install libzydis-doclibzydis4.0t64 4.0.0-2.1build2
fast and lightweight x86/x86-64 disassembler library
sudo apt install libzydis4.0t64zydis-tools 4.0.0-2.1build2
fast and lightweight x86/x86-64 disassembler library - tools
sudo apt install zydis-toolszydis 4.1.0-r0
Fast and lightweight x86/x86-64 disassembler and code generation library
sudo apk add zydiszydis-dev 4.1.0-r0
Fast and lightweight x86/x86-64 disassembler and code generation library (development files)
sudo apk add zydis-devzydis-doc 4.1.0-r0
Fast and lightweight x86/x86-64 disassembler and code generation library (documentation)
sudo apk add zydis-doczydis 5.0.0-3.20250928git5091440.fc44
Fast and lightweight x86/x86-64 disassembler and code generation library
https://github.com/zyantific/zydis
sudo dnf install zydiszydis-devel 5.0.0-3.20250928git5091440.fc44
Development libraries and header files for zydis
https://github.com/zyantific/zydis
sudo dnf install zydis-develzydis-doc 5.0.0-3.20250928git5091440.fc44
Documentation for zydis
https://github.com/zyantific/zydis
sudo dnf install zydis-doczydis-tools 5.0.0-3.20250928git5091440.fc44
Tools for zydis
https://github.com/zyantific/zydis
sudo dnf install zydis-toolssource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.