CVE-2025-67873 is a heap buffer overflow vulnerability in the Capstone disassembly framework, specifically triggered by a specially crafted skipdata callback that is not properly bounds-checked. This can allow a local attacker to write beyond allocated memory, potentially causing denial of service or arbitrary code execution. The vulnerability affects Red Hat Hardened Images RPMs including capstone-5.0.7-0.1.hum1 packages for aarch64 and x86_64 architectures. Exploitation requires local access and user interaction. Red Hat has released an update to address this issue, though explicit patch links are not provided in the advisory content. The vulnerability is rated moderate severity by Red Hat and is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-787 (Out-of-bounds Write).

The vulnerability allows a local attacker to cause a denial of service by crashing the application or potentially execute arbitrary code by exploiting the heap buffer overflow. This can compromise system integrity and availability. Exploitation requires local access and user interaction, limiting remote exploitation. The impact includes possible unauthorized code execution and service disruption.

Red Hat has released updated RPM packages for the affected Capstone components as part of the Red Hat Hardened Images update. Users should apply these updates to remediate the vulnerability. Since this is a local attack requiring user interaction, limiting local access and applying the vendor-provided update are the primary mitigations. Patch status is confirmed by the vendor advisory indicating an update is available. No alternative mitigations are specified.