CVE-2025-5914Patch(libarchive / enterprise_linux)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch libarchive enterprise_linux systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-190

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • enterprise_linux
  • libarchive
  • openshift_container_platform

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-19); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Products
enterprise_linuxlibarchiveopenshift_container_platform

6 versions affected across 3 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-19: 1Mentions · 2026-08-02: 1Patch / Workaround · 2026-07-19: 107-1908-02
Signal classification2 categories
Patch
150.0%
General
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-07-191
Patch1
2026-08-021
General1
Full discourse2 posts
  • MalwareObserver@MalwareObserver
    General

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2025-5914](https://access.redhat.com/errata/RHSA-2025:14130) A vulnerability has been identi... https://access.redhat.com/errata/RHSA-2025:14130 #Vulnerability #CVE #ZeroDay

    Post summary

    A simple notification of CVE-2025-5914 with a link to Red Hat’s errata page, lacking detailed information or specific claims.

    0000029
    18 followersView on X
  • MalwareObserver@MalwareObserver
    Patch

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2025-5914](https://access.redhat.com/errata/RHSA-2025:14130) A vulnerability has been identi... https://access.redhat.com/errata/RHSA-2025:14130 #PatchManagement #Vulnerability #CVE

    Post summary

    Red Hat has issued an errata page for CVE‑2025‑5914, indicating that a patch or workaround is available, but the post does not detail the vulnerability or exploitation.

    0000030
    12 followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
Applibarchivelibarchive---
OSredhatenterprise_linux10.0--
OSredhatenterprise_linux6.0--
OSredhatenterprise_linux7.0--
OSredhatenterprise_linux8.0--
OSredhatenterprise_linux9.0--
Appredhatopenshift_container_platform4.0--

Explore more