Red Hat Security AdvisoryRHSA-2026:68637
Red Hat AI Base Images 3.3.3 (ROCm 7.0)
Released 2026-09-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-7.0-rhel9
Fixes 6 records
Priority MEDIUM 46
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0103 · Published 2026-07-27 · Partial fix · 0.24.0 CWE-190
Priority MEDIUM 46
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0103 · Published 2026-07-27 · Partial fix · 0.24.0 CWE-409
Priority LOW 36
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.
CVSS 3.1HIGH 7.6· Network · No auth · User interaction · EPSS 0.00454 · Published 2026-06-19 · Partial fix · 140.13.0-1.el10_0, 140.13.0-1.el7_9 +57 CWE-122
Priority LOW 35
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00876 · Published 2026-06-19 · Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-787
Priority LOW 34
An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00643 · Published 2026-06-19 · Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-787
Priority LOW 32
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00578 · Published 2026-06-19 · Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-125