An integer overflow vulnerability exists in libarchive when handling WARC files with content sizes exceeding INT64_MAX - 4 bytes. This overflow can cause memory corruption or denial-of-service conditions in applications relying on libarchive for archive processing. The flaw affects all libarchive versions before 3.8.0. The vulnerability has a CVSS score of 3.9 (low severity) and requires local privileges with low complexity and user interaction to exploit. No known exploits are reported in the wild. The vendor advisory from Red Hat is available but does not explicitly state patch availability.

Successful exploitation may cause unpredictable program behavior, memory corruption, or denial-of-service conditions in affected applications processing maliciously crafted WARC archives. Confidentiality and integrity impacts are low, with availability impact limited to denial-of-service. The vulnerability requires local access and user interaction, limiting its risk.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-5916 for current remediation guidance. Until a patch is applied, avoid processing untrusted WARC files with vulnerable libarchive versions. Monitor vendor communications for updates on fixes.