Skip to content

CVE-2025-67873

Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

4.8 MediumFix available

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

0.23%Up 0.2 points since Dec 18, 2025

What each source reports

CVE List Score used 4.8

Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: CVE-2025-67873
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weakness: CWE-122
Updated: 2026-11-02

EUVDEUVD-2025-203996 4.8

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: EUVD-2025-203996
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Updated: 2026-11-02

NVD 4.8

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: CVE-2025-67873
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-122
Updated: 2026-11-02

OSVALPINE-CVE-2025-67873 7.8

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: ALPINE-CVE-2025-67873
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVBELL-CVE-2025-67873 7.8

Record: BELL-CVE-2025-67873
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 4.8

Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: CVE-2025-67873
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Weakness: CWE-122
Updated: 2026-11-02

Show 22 moreShow less

OSVDEBIAN-CVE-2025-67873 7.8

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: DEBIAN-CVE-2025-67873
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:12781 7.3

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record: RHSA-2026:12781
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:13923 7.3

Red Hat Security Advisory: capstone security update

Record: RHSA-2026:13923
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:4898 7.3

Red Hat Security Advisory: capstone security update

Record: RHSA-2026:4898
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:5123 7.3

Red Hat Security Advisory: capstone security update

Record: RHSA-2026:5123
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:5124 7.3

Red Hat Security Advisory: capstone security update

Record: RHSA-2026:5124
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:5125 7.3

Red Hat Security Advisory: capstone security update

Record: RHSA-2026:5125
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:5224 7.3

Red Hat Security Advisory: capstone security update

Record: RHSA-2026:5224
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2026:6817 7.3

Red Hat Security Advisory: capstone security update

Record: RHSA-2026:6817
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:4898 7.3

Important: capstone security update

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Security Fix(es):

capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:4898
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2026:6817 7.3

Important: capstone security update

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Security Fix(es):

capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2026:6817
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-67873 4.8

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: UBUNTU-CVE-2025-67873
CVSS 3.1: 4.8 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVALSA-2026:4898 No score

Important: capstone security update

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Security Fix(es):

capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:4898
Updated: 2026-11-02

OSVALSA-2026:6817 No score

Important: capstone security update

Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.

Security Fix(es):

capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)
capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2026:6817
Updated: 2026-11-02

OSVAZL-72700 No score

CVE-2025-67873 affecting package capstone 4.0.2-4

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: AZL-72700
Updated: 2026-11-05

OSVAZL-72818 No score

CVE-2025-67873 affecting package capstone 4.0.2-4

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: AZL-72818
Updated: 2026-11-02

OSVAZL-74915 No score

CVE-2025-67873 affecting package rust for versions less than 1.90.0-4

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.

Record: AZL-74915
Updated: 2026-11-05

OSVCLSA-2026-1774374355 No score

capstone: Fix of CVE-2025-67873

CVE-2025-67873: fix heap buffer overflow in cs_insn.bytes

Record: CLSA-2026-1774374355
Updated: 2026-11-02

OSVCLSA-2026-1774437715 No score

capstone: Fix of CVE-2025-67873

CVE-2025-67873: fix heap buffer overflow in cs_insn.bytes

Record: CLSA-2026-1774437715
Updated: 2026-11-02

OSVSUSE-SU-2026:0060-1 No score

Security update for capstone

This update for capstone fixes the following issues:

Security issues fixed:

CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow (bsc#1255309).
CVE-2025-68114: unchecked vsnprintf return value can lead to a stack buffer overflow (bsc#1255310).

Other updates and bugfixes:

Enable static library, and add libcapstone-devel-static subpackage.

Record: SUSE-SU-2026:0060-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20054-1 No score

Security update for capstone

This update for capstone fixes the following issues:

CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow (bsc#1255309).
CVE-2025-68114: unchecked vsnprintf return value can lead to a stack buffer overflow (bsc#1255310).

Record: SUSE-SU-2026:20054-1
Updated: 2026-11-02

OSVSUSE-SU-2026:20868-1 No score

Security update for capstone

This update for capstone fixes the following issues:

CVE-2025-67873: Skipdata length unchecked leads to cs_insn.bytes heap buffer overflow (bsc#1255309).
CVE-2025-68114: Unchecked vsnprintf return in SStream_concat allows stack buffer overflow (bsc#1255310).

Record: SUSE-SU-2026:20868-1
Updated: 2026-11-02

Affected products

capstone-engine capstone

Affected packages

Affected packages
Package	Affected	Fixed
`capstone` Alpine:v3.23	before 5.0.7-r0	5.0.7-r0
`capstone` Alpine:v3.24	before 5.0.7-r0	5.0.7-r0
`capstone` AlmaLinux:9 From an advisory covering 2 CVEs	before 4.0.2-11.el9_7	4.0.2-11.el9_7
`capstone-devel` AlmaLinux:9 From an advisory covering 2 CVEs	before 4.0.2-11.el9_7	4.0.2-11.el9_7
`capstone-java` AlmaLinux:9 From an advisory covering 2 CVEs	before 4.0.2-11.el9_7	4.0.2-11.el9_7
`python3-capstone` AlmaLinux:9 From an advisory covering 2 CVEs	before 4.0.2-11.el9_7	4.0.2-11.el9_7
`capstone-java` AlmaLinux:10 From an advisory covering 2 CVEs	before 5.0.1-7.el10_1	5.0.1-7.el10_1
`python3-capstone` AlmaLinux:10 From an advisory covering 2 CVEs	before 5.0.1-7.el10_1	5.0.1-7.el10_1
`capstone` Azure Linux:3	through 4.0.2-4	None known
`capstone` Azure Linux:2	through 4.0.2-4	None known

Show 84 moreShow less

Affected packages
Package	Affected	Fixed
`rust` Azure Linux:3	1.85.0 up to 1.90.0-4	1.90.0-4
`capstone` Alpaquita:25	5.0.6-r0 up to 5.0.7-r0	5.0.7-r0
`capstone` Alpaquita:stream	4.0.2-r5 up to 5.0.7-r0	5.0.7-r0
`capstone` TuxCare:AlmaLinux:9.6	before 4.0.2-10.el9.tuxcare.els2	4.0.2-10.el9.tuxcare.els2
`capstone-devel` TuxCare:AlmaLinux:9.6	before 4.0.2-10.el9.tuxcare.els2	4.0.2-10.el9.tuxcare.els2
`capstone-java` TuxCare:AlmaLinux:9.6	before 4.0.2-10.el9.tuxcare.els2	4.0.2-10.el9.tuxcare.els2
`python3-capstone` TuxCare:AlmaLinux:9.6	before 4.0.2-10.el9.tuxcare.els2	4.0.2-10.el9.tuxcare.els2
`capstone` TuxCare:AlmaLinux:9.2	before 4.0.2-10.el9.tuxcare.els2	4.0.2-10.el9.tuxcare.els2
`capstone-devel` TuxCare:AlmaLinux:9.2	before 4.0.2-10.el9.tuxcare.els2	4.0.2-10.el9.tuxcare.els2
`capstone-java` TuxCare:AlmaLinux:9.2	before 4.0.2-10.el9.tuxcare.els2	4.0.2-10.el9.tuxcare.els2
`python3-capstone` TuxCare:AlmaLinux:9.2	before 4.0.2-10.el9.tuxcare.els2	4.0.2-10.el9.tuxcare.els2
`capstone` Debian:12	All versions, plus listed versions 4.0.2-54.0.2-5.15.0-1~exp15.0.1-1~exp15.0.3-1 Show 6 moreShow less 5.0.5-15.0.6-15.0.7-15.0.7-1~deb13u15.0.7-25.0.9-1	None known
`capstone` Debian:13	before 5.0.7-1~deb13u1, plus listed versions 5.0.6-1	5.0.7-1~deb13u1
`capstone` Debian:14	before 5.0.7-1, plus listed versions 5.0.6-15.0.7-1~deb13u1	5.0.7-1
`capstone` Red Hat:hummingbird:1 From an advisory covering 2 CVEs	before 0:5.0.7-0.1.hum1	0:5.0.7-0.1.hum1
`capstone-devel` Red Hat:hummingbird:1 From an advisory covering 2 CVEs	before 0:5.0.7-0.1.hum1	0:5.0.7-0.1.hum1
`capstone-java` Red Hat:hummingbird:1 From an advisory covering 2 CVEs	before 0:5.0.7-0.1.hum1	0:5.0.7-0.1.hum1
`capstone-static` Red Hat:hummingbird:1 From an advisory covering 2 CVEs	before 0:5.0.7-0.1.hum1	0:5.0.7-0.1.hum1
`python3-capstone` Red Hat:hummingbird:1 From an advisory covering 2 CVEs	before 0:5.0.7-0.1.hum1	0:5.0.7-0.1.hum1
`capstone` Red Hat:rhel_e4s:9.0::appstream From an advisory covering 2 CVEs	before 0:4.0.2-5.el9_0	0:4.0.2-5.el9_0
`capstone-debuginfo` Red Hat:rhel_e4s:9.0::appstream From an advisory covering 2 CVEs	before 0:4.0.2-5.el9_0	0:4.0.2-5.el9_0
`capstone-debugsource` Red Hat:rhel_e4s:9.0::appstream From an advisory covering 2 CVEs	before 0:4.0.2-5.el9_0	0:4.0.2-5.el9_0
`python3-capstone-debuginfo` Red Hat:rhel_e4s:9.0::appstream From an advisory covering 2 CVEs	before 0:4.0.2-5.el9_0	0:4.0.2-5.el9_0
`capstone` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`capstone-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`capstone-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`python3-capstone-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`capstone-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`capstone-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`capstone-devel` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`capstone-java` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`python3-capstone` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`python3-capstone-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`capstone` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_2	0:4.0.2-11.el9_2
`capstone-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_2	0:4.0.2-11.el9_2
`capstone-debugsource` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_2	0:4.0.2-11.el9_2
`python3-capstone-debuginfo` Red Hat:rhel_e4s:9.2::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_2	0:4.0.2-11.el9_2
`capstone` Red Hat:rhel_eus:9.6::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`capstone-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`capstone-debugsource` Red Hat:rhel_eus:9.6::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`python3-capstone-debuginfo` Red Hat:rhel_eus:9.6::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`capstone-debuginfo` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`capstone-debugsource` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`capstone-devel` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`capstone-java` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`python3-capstone` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`python3-capstone-debuginfo` Red Hat:rhel_eus:9.6::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_6	0:4.0.2-11.el9_6
`capstone` Red Hat:rhel_eus:9.4::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`capstone-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`capstone-debugsource` Red Hat:rhel_eus:9.4::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`python3-capstone-debuginfo` Red Hat:rhel_eus:9.4::appstream From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`capstone-debuginfo` Red Hat:rhel_eus:9.4::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`capstone-debugsource` Red Hat:rhel_eus:9.4::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`capstone-devel` Red Hat:rhel_eus:9.4::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`capstone-java` Red Hat:rhel_eus:9.4::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`python3-capstone` Red Hat:rhel_eus:9.4::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`python3-capstone-debuginfo` Red Hat:rhel_eus:9.4::crb From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_4	0:4.0.2-11.el9_4
`capstone` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_0	0:5.0.1-7.el10_0
`capstone-debuginfo` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_0	0:5.0.1-7.el10_0
`capstone-debugsource` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_0	0:5.0.1-7.el10_0
`capstone-devel` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_0	0:5.0.1-7.el10_0
`capstone-java` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_0	0:5.0.1-7.el10_0
`python3-capstone` Red Hat:enterprise_linux_eus:10.0 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_0	0:5.0.1-7.el10_0
`capstone` Red Hat:enterprise_linux:10.1 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_1	0:5.0.1-7.el10_1
`capstone-debuginfo` Red Hat:enterprise_linux:10.1 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_1	0:5.0.1-7.el10_1
`capstone-debugsource` Red Hat:enterprise_linux:10.1 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_1	0:5.0.1-7.el10_1
`capstone-devel` Red Hat:enterprise_linux:10.1 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_1	0:5.0.1-7.el10_1
`capstone-java` Red Hat:enterprise_linux:10.1 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_1	0:5.0.1-7.el10_1
`python3-capstone` Red Hat:enterprise_linux:10.1 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_1	0:5.0.1-7.el10_1
`capstone` Rocky Linux:9 From an advisory covering 2 CVEs	before 0:4.0.2-11.el9_7	0:4.0.2-11.el9_7
`capstone` Rocky Linux:10 From an advisory covering 2 CVEs	before 0:5.0.1-7.el10_1	0:5.0.1-7.el10_1
`capstone` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs	before 4.0.2-150500.3.3.1	4.0.2-150500.3.3.1
`capstone` SUSE:Linux Enterprise Module for Server Applications 15 SP7 From an advisory covering 2 CVEs	before 4.0.2-150500.3.3.1	4.0.2-150500.3.3.1
`capstone` openSUSE:Leap 15.6 From an advisory covering 2 CVEs	before 4.0.2-150500.3.3.1	4.0.2-150500.3.3.1
`capstone` SUSE:Linux Micro 6.1 From an advisory covering 2 CVEs	before 4.0.2-slfo.1.1_2.1	4.0.2-slfo.1.1_2.1
`capstone` SUSE:Linux Micro 6.0 From an advisory covering 2 CVEs	before 4.0.2-6.1	4.0.2-6.1
`capstone` Ubuntu:16.04:LTS	All versions, plus listed versions 3.0.4-0.13.0.4-0.2	None known
`capstone` Ubuntu:18.04:LTS	All versions, plus listed versions 3.0.4-33.0.4-5	None known
`capstone` Ubuntu:20.04:LTS	All versions, plus listed versions 4.0.1+really+3.0.5-14.0.1+really+3.0.5-1build1	None known
`capstone` Ubuntu:22.04:LTS	All versions, plus listed versions 4.0.2-34.0.2-3build14.0.2-5	None known
`capstone` Ubuntu:24.04:LTS	All versions, plus listed versions 4.0.2-54.0.2-5ubuntu14.0.2-5.14.0.2-5.1build1	None known
`capstone` Ubuntu:25.10	All versions, plus listed versions 5.0.5-15.0.6-1	None known
`capstone` Ubuntu:26.10	All versions, plus listed versions 5.0.7-25.0.9-1	None known
`capstone` Ubuntu:26.04:LTS	All versions, plus listed versions 5.0.6-15.0.6-1build15.0.7-2	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 5, 2026	facts	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-67873 is a medium vulnerability (CVSS 4.8) in Capstone-engine Capstone, published December 17, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.23%, the 14th percentile. Fixed in capstone 5.0.7-r0.

References

Show 44 moreShow less