Red Hat Security Advisory

RHSA-2026:42875

RHEL AI 3.5 RPM runtime CVE fix - aom

Released 2026-07-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AI 3.5 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1

TI-2026-40573 CVE-2026-56208 · GHSA-mgv2-4j37-m3x6

LOW 36

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00454 Published 2026-06-19 Partial fix · 140.13.0-1.el10_0, 140.13.0-1.el7_9 +57 CWE-122

TI-2026-40576 CVE-2026-56211 · GHSA-qr4p-j2pf-4w4x

LOW 35

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00876 Published 2026-06-19 Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-787

TI-2026-40574 CVE-2026-56209 · GHSA-8vmr-q5h8-3vc5

LOW 34

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00643 Published 2026-06-19 Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-787

TI-2026-40575 CVE-2026-56210 · GHSA-xpjh-7q9g-cgj5

LOW 32

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00578 Published 2026-06-19 Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-125