Alpine Linux capstone CVE-2025-68114

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 22:57 vuln.today

DescriptionCVE.org

Alpine Linux: capstone fixed in 5.0.7-r0

AnalysisAI

Capstone disassembly framework on Alpine Linux received a security fix in package version 5.0.7-r0, though the nature and impact of the underlying vulnerability have not been publicly disclosed. The extremely terse CVE description - limited to a package version string - provides no detail on attack vector, affected component, or attacker-achievable impact. With an EPSS score of 0.04% (12th percentile), automated exploitation at scale appears unlikely, but the absence of disclosed technical detail prevents confident risk classification.

Technical ContextAI

Capstone is an open-source, multi-architecture disassembly framework widely used in security tools, debuggers, binary analysis platforms, and reverse engineering software. It supports numerous instruction set architectures including x86, ARM, MIPS, and RISC-V. The affected package is distributed via Alpine Linux's apk package manager. No CWE classification has been assigned, and no CPE strings were provided in the available intelligence, making it impossible to determine whether the vulnerability resides in the capstone library's core disassembly engine, its bindings, or a supporting component. The root cause class - whether memory safety, logic error, integer handling, or otherwise - is entirely unconfirmed from available data.

Affected ProductsAI

The affected product is the capstone disassembly framework as packaged for Alpine Linux, with the fix delivered in package version 5.0.7-r0. Versions of the Alpine Linux capstone package prior to 5.0.7-r0 are presumed affected. No CPE strings, specific Alpine Linux branch versions (e.g., Alpine 3.18, 3.19, 3.20, edge), or upstream capstone release versions have been provided in the available intelligence. The sole source is the Alpine Linux vendor advisory tracked under CVE-2025-68114.

RemediationAI

The primary remediation is to upgrade the capstone package to version 5.0.7-r0 or later on affected Alpine Linux systems using the standard package manager command: 'apk upgrade capstone'. No specific vendor advisory URL was included in the available intelligence beyond the Alpine package tracker attribution. Because the vulnerability's nature is undisclosed, no targeted compensating controls can be responsibly recommended. As a general precaution pending disclosure, restrict access to applications that directly invoke the capstone library to trusted users, and avoid exposing capstone-backed tooling (e.g., disassemblers, debuggers) to untrusted input in production environments. No side effects of upgrading the package have been identified.