This advisory covers multiple vulnerabilities fixed in spice-client-win MSI installers and related components in Red Hat Enterprise Linux. The integer truncation vulnerability in SQLite (CVE-2025-6965) could lead to incorrect processing of integer values. The libtiff vulnerabilities include a use-after-free (CVE-2025-8176) and a write-what-where condition (CVE-2025-9900), both of which can lead to memory corruption. Additionally, libexpat (CVE-2025-59375) has a flaw allowing attackers to trigger large dynamic memory allocations via crafted XML documents. Red Hat has issued updated packages for affected versions of RHEL 8.8 and 9, covering multiple architectures and update services. The vendor advisory confirms these fixes and provides detailed package information and instructions for applying updates.

The vulnerabilities could allow attackers to cause memory corruption or excessive memory allocation, potentially leading to denial of service or other impacts depending on the context of use. The integer truncation in SQLite may cause incorrect data handling. The libtiff use-after-free and write-what-where vulnerabilities could lead to memory corruption, which may be exploitable. The libexpat issue can cause large memory allocations, potentially leading to denial of service. No active exploitation in the wild has been reported at this time.

Red Hat has released official security updates addressing these vulnerabilities. Users should apply the provided patches for spice-client-win and related packages as detailed in the Red Hat advisories RHSA-2026:0001 and RHSA-2025:11802. Following the vendor's update instructions will mitigate these issues. No additional mitigation steps are indicated by the vendor advisory.