{"id":"CVE-2025-67873","aliases":["ALPINE-CVE-2025-67873","ALSA-2026:4898","ALSA-2026:6817","AZL-72700","AZL-72818","AZL-74915","BELL-CVE-2025-67873","CLSA-2026-1774374355","CLSA-2026-1774437715","DEBIAN-CVE-2025-67873","EUVD-2025-203996","GHSA-hj6g-v545-v7jg","RHSA-2026:12781","RHSA-2026:13923","RHSA-2026:4898","RHSA-2026:5123","RHSA-2026:5124","RHSA-2026:5125","RHSA-2026:5224","RHSA-2026:6817","RLSA-2026:4898","RLSA-2026:6817","SUSE-SU-2026:0060-1","SUSE-SU-2026:20054-1","SUSE-SU-2026:20868-1","UBUNTU-CVE-2025-67873"],"status":"published","title":"Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00233,"percentile":0.1424,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2025-12-17T21:12:13Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"capstone","fixed_in":["5.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"capstone","fixed_in":["5.0.7-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"rust","fixed_in":["1.90.0-4"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"capstone","fixed_in":["5.0.7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"capstone","fixed_in":["5.0.7-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"capstone","fixed_in":["4.0.2-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"capstone-devel","fixed_in":["4.0.2-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"capstone-java","fixed_in":["4.0.2-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-capstone","fixed_in":["4.0.2-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"capstone","fixed_in":["4.0.2-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"capstone-devel","fixed_in":["4.0.2-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"capstone-java","fixed_in":["4.0.2-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-capstone","fixed_in":["4.0.2-10.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"capstone","fixed_in":["5.0.7-1~deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"capstone","fixed_in":["5.0.7-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.7-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"capstone-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-7.el10_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-7.el10_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.0.2-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.0.2-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.85.0"},{"fixed":"1.90.0-4"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0.6-r0"},{"fixed":"5.0.7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.2-r5"},{"fixed":"5.0.7-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"capstone-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"capstone-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-10.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.2-5","4.0.2-5.1","5.0-1~exp1","5.0.1-1~exp1","5.0.3-1","5.0.5-1","5.0.6-1","5.0.7-1","5.0.7-1~deb13u1","5.0.7-2","5.0.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.7-1~deb13u1"}]}],"versions":["5.0.6-1"]},{"source":"osv","ecosystem":"Debian:14","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.7-1"}]}],"versions":["5.0.6-1","5.0.7-1~deb13u1"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.7-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"capstone-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.7-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.7-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"capstone-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.7-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.7-0.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-5.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-5.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-5.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"python3-capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-5.el9_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"capstone-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3-capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"python3-capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"python3-capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"capstone-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"python3-capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"python3-capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"capstone-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"python3-capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"capstone-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_0"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"capstone-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"capstone-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"capstone-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"capstone-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"python3-capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-11.el9_7"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-7.el10_1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-150500.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-150500.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-150500.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.4-0.1","3.0.4-0.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.4-3","3.0.4-5"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.1+really+3.0.5-1","4.0.1+really+3.0.5-1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.2-3","4.0.2-3build1","4.0.2-5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.2-5","4.0.2-5ubuntu1","4.0.2-5.1","4.0.2-5.1build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.5-1","5.0.6-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.7-2","5.0.9-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"capstone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.6-1","5.0.6-1build1","5.0.7-2"]}],"products":[{"vendor":"capstone-engine","product":"capstone"}],"references":[{"url":"https://github.com/capstone-engine/capstone/security/advisories/GHSA-hj6g-v545-v7jg","tags":["x_refsource_CONFIRM","exploit","Exploit","Vendor Advisory","advisory","article","report"]},{"url":"https://github.com/capstone-engine/capstone/commit/cbef767ab33b82166d263895f24084b75b316df3","tags":["x_refsource_MISC","Patch","fix","article","report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-67873","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:4898","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-67873","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-68114","tags":["report"]},{"url":"https://bugzilla.redhat.com/2423416","tags":["report"]},{"url":"https://bugzilla.redhat.com/2423419","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-4898.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6817","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-6817.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-67873","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-67873","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1774374355.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1774437715.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67873.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-67873","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:12781","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12781.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2423419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-67873","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2423416","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-68114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68114","tags":["advisory"]},{"url":"https://github.com/capstone-engine/capstone/commit/2c7797182a1618be12017d7d41e0b6581d5d529e","tags":["article"]},{"url":"https://github.com/capstone-engine/capstone/security/advisories/GHSA-85f5-6xr3-q76r","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13923","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13923.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4898.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5123","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5123.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5124","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5124.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5125","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5125.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:5224","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5224.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6817.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:4898","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:6817","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20260060-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1255309","tags":["report"]},{"url":"https://bugzilla.suse.com/1255310","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-67873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-68114","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620054-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620868-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-67873","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-67873","title":"Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T21:12:13.739Z","modified":"2025-12-18T15:09:19.484Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:32:52.21763Z"}],"euvd":[{"id":"EUVD-2025-203996","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T21:12:13Z","modified":"2025-12-18T15:09:19Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:49:03.071772Z"}],"nvd":[{"id":"CVE-2025-67873","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T22:16:00.147Z","modified":"2026-10-13T11:10:00.203Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:11:51.309584Z"}],"osv":[{"id":"ALPINE-CVE-2025-67873","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T22:16:00.147Z","modified":"2026-11-03T06:32:34.134649295Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"BELL-CVE-2025-67873","status":"published","published":"2025-12-20T06:07:18.843935Z","modified":"2026-02-13T07:19:36.940263Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:22.495824Z"},{"id":"CVE-2025-67873","title":"Capstone doesn't check Skipdata length, leading to cs_insn.bytes heap buffer overflow","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T21:12:13.739Z","modified":"2026-10-28T11:01:02.675627923Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:52.53036Z"},{"id":"DEBIAN-CVE-2025-67873","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T22:16:00.147Z","modified":"2026-10-14T09:47:36.736571647Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.697959Z"},{"id":"RHSA-2026:12781","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-05-02T10:04:01Z","modified":"2026-10-06T10:31:20.914149113Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:13923","title":"Red Hat Security Advisory: capstone security update","status":"published","published":"2026-05-06T10:05:50Z","modified":"2026-08-22T10:15:12Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:4898","title":"Red Hat Security Advisory: capstone security update","status":"published","published":"2026-03-19T10:20:27Z","modified":"2026-08-22T10:25:43Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:5123","title":"Red Hat Security Advisory: capstone security update","status":"published","published":"2026-03-20T10:19:36Z","modified":"2026-08-22T10:26:20Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:5124","title":"Red Hat Security Advisory: capstone security update","status":"published","published":"2026-03-20T10:19:36Z","modified":"2026-08-22T10:26:21Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:5125","title":"Red Hat Security Advisory: capstone security update","status":"published","published":"2026-03-20T10:19:37Z","modified":"2026-08-22T10:26:21Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:5224","title":"Red Hat Security Advisory: capstone security update","status":"published","published":"2026-03-23T10:10:24Z","modified":"2026-08-22T10:26:27Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:6817","title":"Red Hat Security Advisory: capstone security update","status":"published","published":"2026-04-08T10:08:56Z","modified":"2026-08-22T10:28:09Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:4898","title":"Important: capstone security update","description":"Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.\n\nSecurity Fix(es):\n\n* capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)\n\n* capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-03-26T18:03:52.468416Z","modified":"2026-03-26T18:30:11.684414Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:6817","title":"Important: capstone security update","description":"Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.\n\nSecurity Fix(es):\n\n* capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)\n\n* capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-09T12:07:05.48411Z","modified":"2026-04-09T12:30:10.452309Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2025-67873","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T22:16:00Z","modified":"2026-10-17T12:57:30.125548956Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:52.345622Z"},{"id":"ALSA-2026:4898","title":"Important: capstone security update","description":"Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.  \n\nSecurity Fix(es):  \n\n  * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)\n  * capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-03-18T00:00:00Z","modified":"2026-10-29T11:32:22.377445397Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:6817","title":"Important: capstone security update","description":"Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community.  \n\nSecurity Fix(es):  \n\n  * capstone: Capstone: Memory corruption via unchecked vsnprintf return (CVE-2025-68114)\n  * capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution. (CVE-2025-67873)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-07T00:00:00Z","modified":"2026-10-29T11:30:43.045959482Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-72700","title":"CVE-2025-67873 affecting package capstone 4.0.2-4","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T22:16:00Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:24.309973Z"},{"id":"AZL-72818","title":"CVE-2025-67873 affecting package capstone 4.0.2-4","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T22:16:00Z","modified":"2026-04-21T04:33:43.284926Z","updated_at":"2026-11-02T15:28:09.201912Z"},{"id":"AZL-74915","title":"CVE-2025-67873 affecting package rust for versions less than 1.90.0-4","description":"Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds-checked, so a user-provided skipdata callback can make cs_disasm/cs_disasm_iter memcpy more than 24 bytes into cs_insn.bytes, causing a heap buffer overflow in the disassembly path. Commit cbef767ab33b82166d263895f24084b75b316df3 fixes the issue.","status":"published","published":"2025-12-17T22:16:00Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.456773Z"},{"id":"CLSA-2026-1774374355","title":"capstone: Fix of CVE-2025-67873","description":"- CVE-2025-67873: fix heap buffer overflow in cs_insn.bytes","status":"published","published":"2026-03-24T17:46:00Z","modified":"2026-06-01T00:32:45.910351202Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1774437715","title":"capstone: Fix of CVE-2025-67873","description":"- CVE-2025-67873: fix heap buffer overflow in cs_insn.bytes","status":"published","published":"2026-03-26T10:38:35Z","modified":"2026-06-01T00:32:10.39540971Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"SUSE-SU-2026:0060-1","title":"Security update for capstone","description":"This update for capstone fixes the following issues:\n\nSecurity issues fixed: \n\n- CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow\n  (bsc#1255309).\n- CVE-2025-68114: unchecked `vsnprintf` return value can lead to a stack buffer overflow (bsc#1255310).\n\nOther updates and bugfixes:\n\n- Enable static library, and add `libcapstone-devel-static` subpackage.\n","status":"published","published":"2026-01-07T16:02:47Z","modified":"2026-02-04T03:47:13.851121Z","updated_at":"2026-11-02T15:54:00.846737Z"},{"id":"SUSE-SU-2026:20054-1","title":"Security update for capstone","description":"This update for capstone fixes the following issues:\n\n- CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow (bsc#1255309).\n- CVE-2025-68114: unchecked `vsnprintf` return value can lead to a stack buffer overflow (bsc#1255310).\n","status":"published","published":"2025-12-30T20:03:14Z","modified":"2026-03-23T04:52:32.298258Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:20868-1","title":"Security update for capstone","description":"This update for capstone fixes the following issues:\n\n- CVE-2025-67873: Skipdata length unchecked leads to cs_insn.bytes heap buffer overflow (bsc#1255309).\n- CVE-2025-68114: Unchecked vsnprintf return in SStream_concat allows stack buffer overflow (bsc#1255310).\n","status":"published","published":"2026-03-25T09:40:00Z","modified":"2026-03-28T17:25:37.125936Z","updated_at":"2026-11-02T15:54:01.953589Z"}]}}