TI-2026-40371 CVE-2026-55969 · GHSA-x8jh-qfcv-fp29
Integer overflow in Apache Thrift
Priority MEDIUM 46
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings.
RHSA-2026:69931
Red Hat AI Base Images 3.4.2 (Spyre)
Released 2026-09-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
Fixes 8 records
TI-2026-35942 CVE-2026-48586 · GHSA-6h9h-5c4r-fqgf
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift…
Priority MEDIUM 46
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.
TI-2026-46360 CVE-2026-64835 · GHSA-p2v8-4c4f-rwpq
FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder
Priority MEDIUM 40
FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying…
TI-2026-24812 CVE-2026-32283 · GHSA-jrg3-gfjw-hm96
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls
Priority MEDIUM 40
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.
TI-2026-40573 CVE-2026-56208 · GHSA-mgv2-4j37-m3x6
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
Priority LOW 36
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-40576 CVE-2026-56211 · GHSA-qr4p-j2pf-4w4x
Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames
Priority LOW 35
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-40574 CVE-2026-56209 · GHSA-8vmr-q5h8-3vc5
Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack
Priority LOW 34
An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation.
TI-2026-40575 CVE-2026-56210 · GHSA-xpjh-7q9g-cgj5
Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
Priority LOW 32
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation.