CVE-2025-68114

A flaw was found in Capstone, a disassembly framework. An unchecked return value from vsnprintf within the SStream_concat function allows a malicious input to manipulate the internal stream index. This can lead to a stack buffer underflow or overflow, potentially enabling a local attacker to achieve information disclosure, alter data, or cause a denial of service.

This vulnerability is rated Moderate as an unchecked vsnprintf return in Capstone's SStream_concat function can lead to stack buffer underflow or overflow. Exploitation requires local access and user interaction. This affects Capstone and other components in Red Hat Enterprise Linux, OpenShift Container Platform, and Community Projects.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.