Most recent entries from all

ALSA-2026:39309 — Low: capstone security update

Affected: AlmaLinux:9: capstone, AlmaLinux:9: capstone-devel, AlmaLinux:9: capstone-java, AlmaLinux:9: python3-capstone

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Security Fix(es):

* capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-04943

BELL-CVE-2025-68114

Affected: Alpaquita:25: capstone, Alpaquita:stream: capstone

EUVD-2026-264004

fkie_cve-2025-68114

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.

msrc_CVE-2025-68114 — Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow

msrc_CVE-2025-68114

RHSA-2026:12781 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. capstone: Capstone: Memory corruption via unchecked vsnprintf return

RHSA-2026:39309 — Red Hat Security Advisory: capstone security update

capstone: Capstone: Memory corruption via unchecked vsnprintf return

RLSA-2026:39309 — Low: capstone security update

Affected: Rocky Linux:9: capstone

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Security Fix(es):

* capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:20054-1 — Security update for capstone

Security update for capstone

UBUNTU-CVE-2025-68114

Affected: Ubuntu:16.04:LTS: capstone, Ubuntu:18.04:LTS: capstone, Ubuntu:20.04:LTS: capstone, Ubuntu:22.04:LTS: capstone, Ubuntu:24.04:LTS: capstone, Ubuntu:25.10: capstone, Ubuntu:26.04:LTS: capstone

WID-SEC-W-2026-0769 — Red Hat Enterprise Linux (capstone) und OpenShift (rhcos): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux und Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Dateien zu manipulieren, und um Informationen offenzulegen.