Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

SUSE: Capstone Moderate Heap and Stack Overflow Issues 2026:20054-1

suse
Calendar Grey January 15, 2026
Dist Suse Esm H88
A security update for the capstone application addresses two moderate vulnerabilities in SUSE Linux Micro 6.1.
An update that solves two vulnerabilities can now be installed.

Summary

## This update for capstone fixes the following issues: * CVE-2025-67873: missing bounds check on user-provided skipdata callback can lead to a heap buffer overflow (bsc#1255309). * CVE-2025-68114: unchecked `vsnprintf` return value can lead to a stack buffer overflow (bsc#1255310). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-362=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * capstone-debugsource-4.0.2-slfo.1.1_2.1 * libcapstone4-debuginfo-4.0.2-slfo.1.1_2.1 * libcapstone4-4.0.2-slfo.1.1_2.1

Topics%20covered

Topics Covered

security advisory moderate SuSE heap overflow stack overflow capstone

References

* bsc#1255309

* bsc#1255310

Cross-

* CVE-2025-67873

* CVE-2025-68114

CVSS scores:

* CVE-2025-67873 ( SUSE ): 2.4

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

* CVE-2025-67873 ( SUSE ): 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

* CVE-2025-67873 ( NVD ): 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

* CVE-2025-67873 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

* CVE-2025-68114 ( SUSE ): 2.4

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

* CVE-2025-68114 ( SUSE ): 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

* CVE-2025-68114 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-68114 ( NVD ): 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Affected Products:

* SUSE Linux Micro 6.1

Announcement ID: SUSE-SU-2026:20054-1
Release Date: 2025-12-30T20:02:15Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate SuSE heap overflow stack overflow capstone

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.