Summary
Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.
Security Fix(es):
* capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | capstone | 4.0.2-13.el9_8 |
| AlmaLinux · 9 | capstone-devel | 4.0.2-13.el9_8 |
| AlmaLinux · 9 | capstone-java | 4.0.2-13.el9_8 |
| AlmaLinux · 9 | python3-capstone | 4.0.2-13.el9_8 |
Vulnerabilities 1
-
Medium 4.8
Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when th…