Capstone, a disassembly framework used for binary analysis and reversing, contains two security flaws. CVE-2025-68114 is a memory corruption vulnerability caused by an unchecked return value from the vsnprintf function. CVE-2025-67873 is a heap buffer overflow vulnerability via the skipdata callback mechanism, which can be exploited to cause denial of service or potentially arbitrary code execution. These vulnerabilities affect Red Hat Enterprise Linux 9.6 Extended Update Support and related CodeReady Linux Builder and other variants. Red Hat has issued security updates to fix these issues in capstone version 4.0.2-11.el9_6.

The memory corruption vulnerability (CVE-2025-68114) could lead to unstable behavior or crashes in applications using Capstone. The heap buffer overflow (CVE-2025-67873) is more severe, as it allows an attacker to cause denial of service or execute arbitrary code, potentially compromising system security. The vulnerabilities affect multiple architectures supported by Red Hat Enterprise Linux 9.6 Extended Update Support. No known exploits in the wild have been reported at this time.

Red Hat has released updated capstone packages (version 4.0.2-11.el9_6) that address these vulnerabilities. Users of Red Hat Enterprise Linux 9.6 Extended Update Support and related products should apply these official security updates promptly. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.