The Capstone disassembly framework included in Red Hat Enterprise Linux 9 and related CodeReady Linux Builder products contains two security vulnerabilities. CVE-2025-68114 is a memory corruption vulnerability due to an unchecked vsnprintf return value. CVE-2025-67873 is a heap buffer overflow triggered via the skipdata callback, which can result in denial of service or arbitrary code execution. Red Hat Product Security has issued advisory RHSA-2026:4898 providing updated Capstone packages (version 4.0.2-11.el9_7) that fix these issues across multiple architectures including x86_64, s390x, ppc64le, and aarch64. The update is rated as having an important security impact. No CVSS scores are provided in the advisory. No known exploits in the wild have been reported at this time.

Successful exploitation of CVE-2025-67873 can lead to denial of service or arbitrary code execution due to a heap buffer overflow in the skipdata callback of Capstone. CVE-2025-68114 can cause memory corruption via an unchecked vsnprintf return, potentially leading to instability or code execution. Both vulnerabilities affect the Capstone library used for binary analysis and disassembly, which could impact security tools or applications relying on it. The advisory rates the impact as important, indicating significant risk if unpatched.

Red Hat has released updated Capstone packages (version 4.0.2-11.el9_7) that address these vulnerabilities. Users should apply the security update available via Red Hat Enterprise Linux 9 update channels and CodeReady Linux Builder 9 to remediate these issues. For detailed instructions, refer to Red Hat's update article at https://access.redhat.com/articles/11258. No additional mitigation is indicated by the vendor advisory.