vulnerability
Red Hat: CVE-2025-68114: capstone: Capstone: Memory corruption via unchecked vsnprintf return (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:S/C:C/I:C/A:C) | Dec 17, 2025 | Mar 19, 2026 | Mar 27, 2026 |
Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
Dec 17, 2025
Added
Mar 19, 2026
Modified
Mar 27, 2026
Description
Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.
Solutions
redhat-upgrade-capstoneredhat-upgrade-capstone-debuginforedhat-upgrade-capstone-debugsourceredhat-upgrade-capstone-develredhat-upgrade-capstone-javaredhat-upgrade-python3-capstoneredhat-upgrade-python3-capstone-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.