Skip to content
OpenAdvisories
Medium RHSA-2026:39309 1 CVE

Red Hat Security Advisory: capstone security update

Published Jul 15, 2026 · Updated Aug 22, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream capstone 0:4.0.2-13.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream capstone-debuginfo 0:4.0.2-13.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream capstone-debugsource 0:4.0.2-13.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-capstone-debuginfo 0:4.0.2-13.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb capstone-debuginfo 0:4.0.2-13.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb capstone-debugsource 0:4.0.2-13.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb capstone-devel 0:4.0.2-13.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb capstone-java 0:4.0.2-13.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb python3-capstone 0:4.0.2-13.el9_8
Red Hat · RHEL 9 enterprise_linux:9::crb python3-capstone-debuginfo 0:4.0.2-13.el9_8

Vulnerabilities 1

  • Medium 4.8
    CVE-2025-68114

    Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow

    Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when th…

    capstone-engine capstone rust capstone Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2423416
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39309.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-68114
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-68114
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-68114
  • article
    https://github.com/capstone-engine/capstone/commit/2c7797182a1618be12017d7d41e0b6581d5d529e
  • article
    https://github.com/capstone-engine/capstone/security/advisories/GHSA-85f5-6xr3-q76r