Buffer overflow in Red Hat Enterprise Linux 10

CVE-2025-7519

A flaw was found in polkit. When processing an XML policy with 32 or more nested elements in depth, an out-of-bounds write can be triggered. This issue can lead to a crash or other unexpected behavior, and arbitrary code execution is not discarded. To exploit this flaw, a high-privilege account is needed as it's required to place the malicious policy file properly.

Vulnerability class: Buffer Overflow

EPSS: 0.002 (8.3th percentile) — read the EPSS interpretation.