TI-2026-40371 CVE-2026-55969 · GHSA-x8jh-qfcv-fp29
Integer overflow in Apache Thrift
Priority MEDIUM 46
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings.
RHSA-2026:68697
Red Hat AI Inference Server 3.3.7 (Spyre)
Released 2026-09-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
Fixes 12 records
TI-2026-35942 CVE-2026-48586 · GHSA-6h9h-5c4r-fqgf
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift…
Priority MEDIUM 46
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.
TI-2026-41804 CVE-2026-58049 · GHSA-mjxr-6gqf-w78h
FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()
Priority MEDIUM 45
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so…
TI-2026-46360 CVE-2026-64835 · GHSA-p2v8-4c4f-rwpq
FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder
Priority MEDIUM 40
FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying…
TI-2026-10207 CVE-2026-11824 · GHSA-8g48-4wfm-7247
SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate
Priority LOW 38
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…
TI-2026-40573 CVE-2026-56208 · GHSA-mgv2-4j37-m3x6
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
Priority LOW 36
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-40576 CVE-2026-56211 · GHSA-qr4p-j2pf-4w4x
Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames
Priority LOW 35
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-40574 CVE-2026-56209 · GHSA-8vmr-q5h8-3vc5
Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack
Priority LOW 34
An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-48583 CVE-2026-69244 · GHSA-cq5v-8q36-5273
AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
Priority LOW 32
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
TI-2026-40575 CVE-2026-56210 · GHSA-xpjh-7q9g-cgj5
Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
Priority LOW 32
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-10205 CVE-2026-11822 · GHSA-6qj8-gw6p-hc5p
SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek
Priority LOW 31
SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.
TI-2026-48582 CVE-2026-69243 · GHSA-mfx4-hv73-q22v
AIOHTTP: HTTP request smuggling via WebSocket upgrade
Priority LOW 28
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.