This vulnerability involves an integer overflow in glib during temporary file creation on Red Hat Enterprise Linux 10, which results in out-of-bounds memory access. This can be exploited by a local attacker to manipulate file paths via symbolic links, enabling path traversal or unauthorized access to temporary file contents. The root cause is insufficient validation of file path lengths during temporary file operations. The CVSS 3.1 score is 3.7, reflecting a low severity with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact.

The impact is limited to local attackers potentially gaining unauthorized access to temporary file contents or performing path traversal due to improper pathname limitation. There is no reported confidentiality loss, no availability impact, and the integrity impact is low. No known exploits in the wild have been reported, indicating limited or no active exploitation at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-7039 for current remediation guidance. Since no explicit patch or workaround is mentioned in the provided advisory content, users should monitor the vendor advisory for updates. No additional mitigation steps are recommended beyond applying official fixes once available.