CVE-2025-5914 is an integer overflow vulnerability in the libarchive library used by Red Hat OpenShift sandboxed containers, specifically in the archive_read_format_rar_seek_data() function. This flaw can trigger a double-free condition, leading to memory corruption that may enable arbitrary code execution or denial-of-service. The vulnerability requires local access with limited privileges and involves processing a specially crafted RAR archive. Red Hat has rated this vulnerability as Important (high severity) and has released a new version of the sandboxed containers product, but no explicit fix details or patches are provided in the advisory. The vulnerability is related to CWE-190 (Integer Overflow) and CWE-22, and is part of a security advisory that also includes CVE-2025-6020 and CVE-2025-8941.

Successful exploitation of this vulnerability can lead to memory corruption through a double-free condition, enabling an attacker to execute arbitrary code or cause denial-of-service by crashing the application. The attack requires local access with limited privileges and user interaction (providing a crafted RAR archive). The impact affects confidentiality, integrity, and availability of the affected system components.

The vendor advisory indicates a new release of Red Hat OpenShift sandboxed containers but does not explicitly confirm a patch or fix availability for CVE-2025-5914. Patch status is not yet confirmed — check the Red Hat advisory (https://access.redhat.com/errata/RHSA-2025:15709) for current remediation guidance. Until a fix is confirmed, avoid processing untrusted RAR archives with the affected components. Customers should monitor Red Hat security updates and apply any released updates promptly.