Most recent entries from all

ALSA-2026:4898 — Important: capstone security update

Affected: AlmaLinux:9: capstone, AlmaLinux:9: capstone-devel, AlmaLinux:9: capstone-java, AlmaLinux:9: python3-capstone

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Security Fix(es):

* capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114) * capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-04944

BELL-CVE-2025-67873

Affected: Alpaquita:25: capstone, Alpaquita:stream: capstone

EUVD-2026-264005

fkie_cve-2025-67873

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

msrc_CVE-2025-67873 — Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

msrc_CVE-2025-67873

RHSA-2026:12781 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. capstone: Capstone: Memory corruption via unchecked vsnprintf return

RHSA-2026:4898 — Red Hat Security Advisory: capstone security update

capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. capstone: Capstone: Memory corruption via unchecked vsnprintf return

SUSE-SU-2026:20054-1 — Security update for capstone

Security update for capstone

UBUNTU-CVE-2025-67873

Affected: Ubuntu:16.04:LTS: capstone, Ubuntu:18.04:LTS: capstone, Ubuntu:20.04:LTS: capstone, Ubuntu:22.04:LTS: capstone, Ubuntu:24.04:LTS: capstone, Ubuntu:25.10: capstone, Ubuntu:26.04:LTS: capstone

WID-SEC-W-2026-0769 — Red Hat Enterprise Linux (capstone) und OpenShift (rhcos): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux und Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um Informationen offenzulegen.