Capstone, a disassembly framework for binary analysis, contains two vulnerabilities: CVE-2025-68114 involves memory corruption due to an unchecked vsnprintf return, and CVE-2025-67873 involves a heap buffer overflow via the skipdata callback. These flaws could allow denial of service or arbitrary code execution. Red Hat has released an updated capstone package (4.0.2-11.el9_2) for Red Hat Enterprise Linux 9.2 to fix these issues. The advisory references these CVEs and provides updated packages for multiple architectures. No CVSS scores are provided in the advisory, but the issues are rated as moderate severity.

The heap buffer overflow vulnerability (CVE-2025-67873) can lead to denial of service or arbitrary code execution, which could allow attackers to disrupt services or execute malicious code. The memory corruption vulnerability (CVE-2025-68114) may also cause instability or security issues. Both vulnerabilities affect the capstone library used in Red Hat Enterprise Linux 9.2, potentially impacting systems that use this framework for binary analysis or reverse engineering.

Red Hat has released an updated capstone package version 4.0.2-11.el9_2 that addresses these vulnerabilities. Users should apply this security update promptly to remediate the issues. For detailed instructions on applying the update, refer to Red Hat's official article at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.