This vulnerability arises from the GNU Binutils BFD library's failure to properly validate relocation type values when processing XCOFF object files. An attacker providing a specially crafted XCOFF file can cause the library to perform an out-of-bounds read, potentially leading to application crashes or exposure of unintended memory data. The issue affects Red Hat Enterprise Linux 10 and is classified with a CVSS 3.1 score of 6.1 (medium severity), reflecting local attack vector, low complexity, no privileges required, user interaction needed, unchanged scope, limited confidentiality impact, no integrity impact, and high availability impact.

Successful exploitation can cause denial-of-service through application crashes or limited disclosure of memory contents. The confidentiality impact is low, integrity impact is none, and availability impact is high. The attack requires local access and user interaction, limiting the attack surface. No known exploits have been reported in the wild at this time.

The vendor advisory does not explicitly confirm patch availability or provide remediation steps in the provided content. Users should monitor the official Red Hat advisory page for updates and apply any official fixes once released. Until then, avoid processing untrusted or specially crafted XCOFF object files with affected tools. No additional vendor-recommended mitigations are stated.