This vulnerability in libarchive affects Red Hat Enterprise Linux 10 and involves an out-of-bounds read triggered by piping file streams into bsdtar. The flaw can cause the program to read beyond the intended file boundary, leading to possible memory corruption or denial-of-service. The CVSS 3.1 vector indicates local attack vector, low complexity, requiring privileges and user interaction, with limited confidentiality impact and no integrity impact. The Red Hat advisory is published but does not provide explicit patch or fix details in the provided content.

Successful exploitation may lead to unpredictable program behavior, memory corruption, or denial-of-service conditions. Confidentiality impact is low, with no integrity impact. The attack requires local access and user interaction, limiting the scope of exploitation. No known active exploits have been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-5918 for current remediation guidance. Until a fix is confirmed, avoid piping untrusted file streams into bsdtar or restrict local user access to vulnerable components. Monitor vendor updates for official patches or workarounds.