Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Capstone: Memory Corruption and Code Execution Risk
published 7 months ago
Summary
The Capstone disassembly framework has security issues that could allow an attacker to crash the program or execute malicious code. This could happen if an attacker sends specially crafted data to the program. To stay safe, update to the latest version of Capstone as soon as possible.
What to do
- Update almalinux capstone-java to version 5.0.1-7.el10_1.
- Update almalinux python3-capstone to version 5.0.1-7.el10_1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:10 | almalinux | capstone-java |
< 5.0.1-7.el10_1 Fix: upgrade to 5.0.1-7.el10_1
|
| AlmaLinux:10 | almalinux | python3-capstone |
< 5.0.1-7.el10_1 Fix: upgrade to 5.0.1-7.el10_1
|
Original advisory text
Important: capstone security update
Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.
Security Fix(es):
* capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
* capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
* capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:6817 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-67873 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-68114 Third Party Advisory
- https://bugzilla.redhat.com/2423416 Third Party Advisory
- https://bugzilla.redhat.com/2423419 Third Party Advisory
- https://errata.almalinux.org/10/ALSA-2026-6817.html Vendor Advisory
Timeline
Published7 Apr 2026
Updated26 May 2026
First seen26 May 2026
Sources
ALSA-2026:6817 · OSV
Track software like this
Free during beta