Is CVE-2025-68114 in the CISA KEV catalog?

No. CVE-2025-68114 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2025-68114?

CVE-2025-68114 has a CVSS v3 base score of 4.8 (Moderate).

What is the EPSS score for CVE-2025-68114?

CVE-2025-68114 has an EPSS score of 0.16% (6th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2025-68114?

Upgrade capstone on debian 13 to 5.0.7-1~deb13u1 or later. Fixes are available for 15 affected products.

CVE & CISA-KEV Catalog

CVE-2025-68114

MEDIUM

4.8

CVSS v3

NVD

Description

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.

CWE-120Classic Buffer Overflow CWE-124

How to fix

Remediation Available

capstoneDebian

Fixed in:5.0.7-1~deb13u1CVE-2025-68114

Fixed in:5.0.7-1CVE-2025-68114

capstoneRed Hat / RHEL

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:main@aarch64RHSA-2026:12781

Fixed in:main@srcRHSA-2026:12781

Fixed in:main@x86_64RHSA-2026:12781

Fixed in:main@noarchRHSA-2026:12781

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

capstoneRocky

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:main@aarch64RHSA-2026:12781

Fixed in:main@x86_64RHSA-2026:12781

Fixed in:main@noarchRHSA-2026:12781

Fixed in:main@srcRHSA-2026:12781

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

capstone-debuginfoRed Hat / RHEL

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

capstone-debuginfoRocky

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

capstone-debugsourceRed Hat / RHEL

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

capstone-debugsourceRocky

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

capstone-develRocky

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

capstone-develRed Hat / RHEL

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

capstone-javaRocky

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

capstone-javaRed Hat / RHEL

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

python3-capstoneRed Hat / RHEL

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

python3-capstoneRocky

Fixed in:0:5.0.1-7.el10_0RHSA-2026:5224

Fixed in:0:5.0.1-7.el10_1RHSA-2026:6817

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

python3-capstone-debuginfoRocky

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

python3-capstone-debuginfoRed Hat / RHEL

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_6RHSA-2026:5124

Fixed in:0:4.0.2-5.el9_0RHSA-2026:13923

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_2RHSA-2026:5123

Fixed in:0:4.0.2-11.el9_7RHSA-2026:4898

Fixed in:0:4.0.2-11.el9_4RHSA-2026:5125

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionRequired

ScopeUnchanged

Impact

ConfidentialityLow

IntegrityLow

AvailabilityLow

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Exploit Intelligence

0.16%probability of exploitation in 30 days

6thpercentile

Low risk: more likely to be exploited than 6% of all known CVEs.

References

Patch1

github.com

Vendor Advisory1

github.com

Embed a live status badge for CVE-2025-68114

Markdown

[![CVE-2025-68114](https://tridentstack.com/cve/badge/CVE-2025-68114.svg)](https://tridentstack.com/cve/CVE-2025-68114)

HTML

<a href="https://tridentstack.com/cve/CVE-2025-68114"><img src="https://tridentstack.com/cve/badge/CVE-2025-68114.svg" alt="CVE-2025-68114"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-01-02.