An off-by-one error exists in the poptStuffArgs function of the popt library, which can lead to corruption of internal program data when the function is called repeatedly or through deep alias nesting. This memory corruption could enable a local attacker to execute arbitrary code if the host application subsequently unsafely processes the corrupted poptContext data, for example by passing it to exec, system, popen, or dlopen functions. The vulnerability is classified as CWE-787 (Out-of-bounds Write). Red Hat has issued a security advisory and released updated RPM packages (popt-1.19-11.1.hum1) to fix this flaw.

The impact is low because exploitation requires a local attacker with low privileges to repeatedly invoke the vulnerable function or use deep alias nesting, and the host application must unsafely handle the corrupted data. The vulnerability can cause memory corruption leading to potential arbitrary code execution or denial of service via application crash. However, no confidentiality, integrity, or widespread availability impacts are reported.

A security update fixing this vulnerability is available from Red Hat as popt-1.19-11.1.hum1 and related packages. Users should apply this official patch to remediate the issue. No additional mitigations are specifically recommended by the vendor. Exploitation requires specific conditions and unsafe handling by the host application, so updating the popt package is the primary remediation.