The vulnerability CVE-2025-5914 exists in the libarchive library's RAR parser, specifically in the archive_read_format_rar_seek_data() function. It is caused by an integer overflow that can trigger a double-free memory condition. This double-free can lead to memory corruption, allowing a local attacker with limited privileges to execute arbitrary code or cause application crashes (denial of service). The issue affects Red Hat Discovery, a tool for inspecting and reporting environment data across networks. Red Hat has classified this vulnerability as Important but has not yet provided a patch or fix. The CVSS base score is approximately 7.8, indicating high severity. Additional related CVEs are also noted in the advisory. The vulnerability requires local access and user interaction to exploit.

Successful exploitation of this vulnerability can lead to memory corruption through a double-free condition, potentially allowing an attacker to execute arbitrary code with local privileges or cause denial-of-service by crashing the application. The impact includes high confidentiality, integrity, and availability risks as per Red Hat's assessment. There are no known exploits in the wild currently. The vulnerability affects the stability and security of systems running Red Hat Discovery that process specially crafted RAR archives.

As of the advisory date, Red Hat has not released a fix for this vulnerability. Users should monitor Red Hat's official security advisories for updates and patches. In the meantime, limit local access to trusted users and avoid processing untrusted RAR archives with Red Hat Discovery. Customers with a Red Hat Technical Account Manager (TAM) can consult directly for tailored guidance. No vendor-provided mitigations or workarounds are currently documented.