An integer underflow (CWE-191) exists in the popt library's help formatting function when handling option tables wider than the terminal width. This underflow can lead to memory allocation failures or out-of-bounds writes, causing the application to crash or fail to display help text properly. The vulnerability requires a local user to trigger help output under narrow terminal conditions with large option widths. The impact is limited to denial of service, with no confidentiality or integrity effects reported. The CVSS 3.1 base score is 2.2 (Low), reflecting the high attack complexity and required user interaction. No official fix or patch is currently confirmed in the vendor advisory, and remediation status is not stated. The affected version explicitly identified is popt version 1.13.

The vulnerability can cause denial of service by crashing or causing failure in the help text display of applications using the vulnerable popt library. It does not impact confidentiality or integrity. Exploitation requires local access, specific terminal conditions, and user interaction, limiting the risk and exploitability. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-18839 for current remediation guidance. Due to the high attack complexity and limited exploitability, no immediate urgent action is required. Monitor vendor updates for any forthcoming patches or mitigations.