CVE-2025-67873 is a heap buffer overflow vulnerability in the Capstone disassembly framework used in Red Hat Hardened Images RPMs. The vulnerability arises because the skipdata callback length is not properly bounds-checked, allowing a local attacker to write beyond allocated memory. This can result in denial of service or arbitrary code execution. Exploitation requires local access and user interaction. Red Hat has released updated RPM packages (capstone-5.0.7-0.1.hum1 and related) to fix this issue. The vulnerability is rated moderate severity by Red Hat. No CVSS score is provided by Red Hat, but external sources list scores ranging from 4.8 to 7.8 depending on vendor. The advisory references CWE-122 (Heap-based Buffer Overflow) and CWE-787 (Out-of-bounds Write).

A local attacker with user interaction can exploit this vulnerability to cause a denial of service or execute arbitrary code on affected systems. This can compromise system integrity and availability. The flaw affects the Capstone disassembly framework components in Red Hat Hardened Images RPMs. No known exploits in the wild have been reported.

Red Hat has released updated RPM packages including capstone-5.0.7-0.1.hum1 and related components that fix this vulnerability. Users of affected Red Hat Hardened Images RPMs should apply the update as detailed in the Red Hat advisory at https://images.redhat.com/. No alternative mitigations are specified. Patch status is confirmed by the vendor advisory.