Red Hat Security AdvisoryRHSA-2026:74363
Red Hat AI Base Images 3.3.4 (ROCm 7.0)
Released 2026-10-01 · Red Hat rating Important · View on Red Hat →
Fixes 19 records
Priority MEDIUM 64
A flaw was found in xdgmime.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00277 · Published 2026-07-17 · Partial fix · 2.80.4-12.el10_2.22, 2.80.4-4.el10_0.18 +79 CWE-122
Priority MEDIUM 41
FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vulnerability in the VobSub subtitle demuxer that allows attackers to corrupt adjacent heap memory by supplying a malicious .sub/.idx subtitle file declar…
CVSS 4.0HIGH 8.7· Network · No auth · User interaction · EPSS 0.00646 · Published 2026-07-22 · Partial fix CWE-122
Priority LOW 39
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.6· Network · No auth · User interaction · EPSS 0.00314 · Published 2026-08-11 · Partial fix · 9.2.0840 CWE-184
Priority LOW 38
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.5· Local · No auth · User interaction · EPSS 0.00115 · Published 2026-08-11 · Partial fix · 9.2.0846 CWE-122
Priority LOW 38
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00216 · Published 2026-07-09 · Partial fix · 9.2.0736 CWE-94
Priority LOW 38
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…
CVSS 4.0HIGH 8.5· Local · No auth · User interaction · EPSS 0.00182 · Published 2026-06-09 · Partial fix · 3.53.2 CWE-122
Priority LOW 37
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00144 · Published 2026-08-11 · Fixed in 9.2.0839 CWE-78
Priority LOW 37
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00134 · Published 2026-08-11 · Partial fix · 9.2.0847 CWE-829
Priority LOW 37
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00137 · Published 2026-07-09 · Partial fix · 9.2.0735 CWE-94
Priority LOW 37
Vim is an open source, command line text editor.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00145 · Published 2026-06-25 · Fixed in 9.2.0699 CWE-94
Priority LOW 37
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…
CVSS 4.0HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00153 · Published 2026-06-29 · Partial fix · 2.4.0 CWE-59
Priority LOW 34
Vim is an open source, command line text editor.
CVSS 4.0HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00275 · Published 2026-06-11 · Partial fix · 9.2.0495 CWE-74
Priority LOW 33
Vim is an open source, command line text editor.
CVSS 4.0HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00201 · Published 2026-06-11 · Partial fix · 9.2.0561 CWE-829
Priority LOW 31
SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00195 · Published 2026-06-09 · Partial fix · 3.53.2 CWE-125
Priority LOW 29
Tesseract is an open source OCR engine.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00126 · Published 2026-08-11 · Fixed in 5.5.3 CWE-787
Priority LOW 26
Vim is an open source, command line text editor.
CVSS 4.0MEDIUM 5.7· Local · No auth · User interaction · EPSS 0.00124 · Published 2026-06-25 · Partial fix · 9.2.0653 CWE-787
Priority LOW 24
Vim is an open source, command line text editor.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00135 · Published 2026-06-11 · Partial fix · 9.2.0496 CWE-94
Priority LOW 20
Vim is an open source, command line text editor.
CVSS 4.0MEDIUM 4.0· Local · No auth · User interaction · EPSS 0.00118 · Published 2026-06-25 · Partial fix · 9.2.0698 CWE-787
Priority LOW 13
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.
CVSS 3.1LOW 2.5· Local · No auth · User interaction · EPSS 0.00323 · Published 2025-06-16 · Partial fix · 2.14.5, 2.12.5-10.el10_2.2 +89 CWE-121