CVE-2025-53859 is a memory access flaw in the nginx ngx_mail_smtp_module affecting Red Hat Hardened Images. It allows an unauthenticated attacker to perform an out-of-bounds read during the SMTP authentication process, leaking arbitrary memory bytes sent in a request to the authentication server. This vulnerability is classified under CWE-125 (Out-of-bounds Read) and can expose sensitive information such as cryptographic keys or memory addresses, which could aid further attacks. The issue occurs specifically during SMTP authentication and requires attacker preparation to exploit. Red Hat has published an advisory (RHSA-2026:8346) describing the vulnerability and its impact but has not released a patch or effective mitigation. The CVSS v3 base score assigned by Red Hat is 3.7, reflecting low confidentiality impact and high attack complexity.

The vulnerability allows an attacker to read memory beyond intended bounds during SMTP authentication, potentially exposing sensitive information such as cryptographic keys or memory addresses. This could facilitate bypassing protection mechanisms like ASLR and enable further exploitation. The flaw may also cause denial of service via crashes if memory is improperly accessed. However, the confidentiality impact is rated low, and no integrity or availability impacts are confirmed beyond potential crashes. Exploitation requires network access and high attack complexity with no privileges or user interaction needed.

Currently, no mitigation is available or meets Red Hat's criteria for ease of use, applicability, or stability. Users should monitor Red Hat advisories for updates regarding patches or mitigations. Red Hat recommends upgrading to fixed versions once available. Customers with a Technical Account Manager (TAM) can consult directly for guidance. Until a fix is released, no effective workaround is provided by Red Hat.