Cyber Resilience

CVE-2025-5918

Low

Published: 09 June 2025

Published
09 June 2025
Modified
15 August 2025
KEV Added
Patch
CVSS Score v3.1 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L
EPSS Score 0.0011 29.5th percentile
Risk Priority 8 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-5918 is a low-severity Out-of-bounds Read (CWE-125) vulnerability in Redhat Enterprise Linux. Its CVSS base score is 3.9 (Low).

Operationally, ranked at the 29.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing for reading past the end of the file. This out-of-bounds read can lead to unintended consequences, including…

more

unpredictable program behavior, memory corruption, or a denial-of-service condition.

CWE(s)

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

libarchive
libarchive
≤ 3.8.0
redhat
openshift container platform
4.0
redhat
enterprise linux
6.0, 7.0, 8.0, 9.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References