Alpine Capstone CVE-2025-67873

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 22:57 vuln.today

DescriptionCVE.org

Alpine Linux: capstone fixed in 5.0.7-r0

AnalysisAI

Capstone disassembly framework on Alpine Linux received a security fix in package version 5.0.7-r0, addressing an unspecified vulnerability. The nature, impact class, and exploitability of the underlying flaw are not disclosed in the available intelligence - no CVSS score, CWE classification, or vulnerability description has been published. With an EPSS score of 0.01% (3rd percentile), exploitation probability is extremely low, and no public exploit or CISA KEV listing exists at time of analysis.

Technical ContextAI

Capstone is a widely used open-source multi-platform, multi-architecture disassembly framework written in C, commonly embedded in reverse engineering tools, debuggers, binary analysis platforms, and security tooling. On Alpine Linux, it is distributed as a native package. The affected package version predates 5.0.7-r0 on Alpine Linux, but the specific component within capstone that was patched - whether in a particular architecture disassembler, the core engine, or bindings - is unknown from the available data. No CWE root cause classification has been assigned, and no CPE strings were provided in the intelligence, preventing precise version bounding beyond the Alpine package fix marker.

Affected ProductsAI

Alpine Linux installations running the capstone package at versions prior to 5.0.7-r0 are affected. The fix is confirmed in Alpine Linux package capstone 5.0.7-r0. No CPE strings were provided in the available intelligence. Upstream capstone versions corresponding to the vulnerable Alpine package are not confirmed from available data. No vendor advisory URL was included in the intelligence; the fix is attributed to the Alpine Linux vendor advisory process.

RemediationAI

The primary remediation is to upgrade the Alpine Linux capstone package to version 5.0.7-r0 or later using the standard Alpine package manager: 'apk upgrade capstone'. This is a vendor-released patch confirmed by the Alpine Linux vendor report. No workaround information is available due to the absence of vulnerability detail. If immediate patching is not feasible, consider restricting access to applications or tools that embed or depend on the capstone library, particularly if exposed to untrusted binary input. No advisory URL was provided in the intelligence; consult the Alpine Linux security advisories for the associated ALAS or security ticket.