Read the docs
TI-2026-40573 Aliases CVE-2026-56208GHSA-mgv2-4j37-m3x6

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

Priority LOW 36CWE-122Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · High
Fix status
Partial Red Hat: 23 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00454 39th percentileScored 2026-11-07
Fix Partial Red Hat: 58 advisoriesRed Hat: 23 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—140.13.0-1.el10_0Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—140.13.0-1.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8—140.13.0-1.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—140.13.0-1.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—140.13.0-1.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—140.13.0-1.el8_6Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—140.13.0-1.el8_6Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—140.13.0-1.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—140.13.0-1.el8_8Patch availableCNA
Red HatRed Hat Enterprise Linux 9—140.13.0-1.el9_8Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—140.13.0-1.el9_2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions—140.13.0-1.el9_4Patch availableCNA
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support—140.13.0-1.el9_6Patch availableCNA
Red HatRed Hat Enterprise Linux AI 3.3 for RHEL 9—3.14.0-1.el9aiPatch availableCNA
Red HatRed Hat Enterprise Linux AI 3.4 for RHEL 9—3.14.0-1.el9aiPatch availableCNA
Red HatRed Hat Enterprise Linux AI 3.5 for RHEL 9—3.14.0-1.el9aiPatch availableCNA
Red HatRed Hat AI Inference Server 3.2—1787860580Patch availableCNA
Red HatRed Hat AI Inference Server 3.2—1787772157Patch availableCNA
Red HatRed Hat AI Inference Server 3.2—1787884873Patch availableCNA
Red HatRed Hat AI Inference Server 3.3—1789508287Patch availableCNA
Red HatRed Hat AI Inference Server 3.3—1789502493Patch availableCNA
Red HatRed Hat AI Inference Server 3.3—1789504371Patch availableCNA
Red HatRed Hat AI Inference Server 3.3—1789582776Patch availableCNA
Red HatRed Hat Enterprise Linux AI 3.3—1790936334Patch availableCNA
Red HatRed Hat Enterprise Linux AI 3.3—1790936351Patch availableCNA
Red HatRed Hat Enterprise Linux AI 3.3—1790850900Patch availableCNA
Red HatRed Hat Enterprise Linux AI 3.3—1790866732Patch availableCNA
Red HatRed Hat Enterprise Linux AI 3.3—1790936334Patch availableCNA
Red HatRed Hat Enterprise Linux AI 3.3—1790791893Patch availableCNA
Red HatRed Hat Enterprise Linux AI 3.3—1790954179Patch availableCNA
Red HatRed Hat Hardened Images—3.14.0-0.1.hum1Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1789137552Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1789137548Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1789137636Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1789137548Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1789137548Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1789137641Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1789137607Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1789137636Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1786611800Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1787076778Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1787077779Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1787076481Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1788197680Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1788197530Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1788197632Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1788197747Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1788197549Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1788199622Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1788197744Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1788197677Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1791785804Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1788198404Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1788198407Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1788197492Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1788197542Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1788197975Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1788197512Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1788197688Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1788197385Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1788198016Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1790703552Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1790703656Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1790703557Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1790703645Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1790703554Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1790703554Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1790703630Patch availableCNA
Red HatRed Hat OpenShift AI 3.5—1790703706Patch availableCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat AI Inference Server——No fix listedCNA
Red HatRed Hat Enterprise Linux 10——No fix listedCNA
Red HatRed Hat Enterprise Linux 10——Not affectedCNA
Red HatRed Hat Enterprise Linux 8——Not affectedCNA
Red HatRed Hat Enterprise Linux 9——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
Red HatRed Hat OpenShift AI (RHOAI)——Not affectedCNA
  • Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 140.13.0-1.el10_0 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 140.13.0-1.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 140.13.0-1.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 140.13.0-1.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 140.13.0-1.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 140.13.0-1.el8_6 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 140.13.0-1.el8_6 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 140.13.0-1.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 140.13.0-1.el8_8 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 140.13.0-1.el9_8 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 140.13.0-1.el9_2 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 140.13.0-1.el9_4 Patch available CNA
  • Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 140.13.0-1.el9_6 Patch available CNA
  • Red Hat Enterprise Linux AI 3.3 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-1.el9ai Patch available CNA
  • Red Hat Enterprise Linux AI 3.4 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-1.el9ai Patch available CNA
  • Red Hat Enterprise Linux AI 3.5 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-1.el9ai Patch available CNA
  • Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1787860580 Patch available CNA
  • Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1787772157 Patch available CNA
  • Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1787884873 Patch available CNA
  • Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789508287 Patch available CNA
  • Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789502493 Patch available CNA
  • Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789504371 Patch available CNA
  • Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789582776 Patch available CNA
  • Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790936334 Patch available CNA
  • Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790936351 Patch available CNA
  • Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790850900 Patch available CNA
  • Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790866732 Patch available CNA
  • Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790936334 Patch available CNA
  • Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790791893 Patch available CNA
  • Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790954179 Patch available CNA
  • Red Hat Hardened Images VendorRed Hat Affected — Fixed in 3.14.0-0.1.hum1 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137552 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137548 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137636 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137548 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137548 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137641 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137607 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137636 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1786611800 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1787076778 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1787077779 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1787076481 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197680 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197530 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197632 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197747 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197549 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788199622 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197744 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197677 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1791785804 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788198404 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788198407 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197492 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197542 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197975 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197512 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197688 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197385 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788198016 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703552 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703656 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703557 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703645 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703630 Patch available CNA
  • Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703706 Patch available CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA

CPE names CNA · 27

CPEVersionsRoleVendor
cpe:/o:redhat:enterprise_linux_eus:10.010.0—Red Hat
cpe:/o:redhat:rhel_els:77—Red Hat
cpe:/a:redhat:enterprise_linux:8::appstream8—Red Hat
cpe:/a:redhat:rhel_aus:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_aus:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_tus:8.8::appstream8.8—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
  • cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
  • cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
Show 17 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:rhel_e4s:9.2::appstream9.2—Red Hat
cpe:/a:redhat:rhel_e4s:9.4::appstream9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.6::appstream9.6—Red Hat
cpe:/a:redhat:enterprise_linux_ai:3.3::el93.3—Red Hat
cpe:/a:redhat:enterprise_linux_ai:3.4::el93.4—Red Hat
cpe:/a:redhat:enterprise_linux_ai:3.5::el93.5—Red Hat
cpe:/a:redhat:ai_inference_server:3.2::el93.2—Red Hat
cpe:/a:redhat:ai_inference_server:3.3::el93.3—Red Hat
cpe:/a:redhat:hummingbird:11—Red Hat
cpe:/a:redhat:openshift_ai:3.3::el93.3—Red Hat
cpe:/a:redhat:openshift_ai:3.4::el93.4—Red Hat
cpe:/a:redhat:openshift_ai:3.5::el93.5—Red Hat
cpe:/a:redhat:ai_inference_server:33—Red Hat
cpe:/a:redhat:enterprise_linux:1010—Red Hat
cpe:/a:redhat:enterprise_linux:88—Red Hat
cpe:/a:redhat:enterprise_linux:99—Red Hat
cpe:/a:redhat:openshift_ai——Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux_ai:3.3::el9 Versions 3.3 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux_ai:3.4::el9 Versions 3.4 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux_ai:3.5::el9 Versions 3.5 — ·Red Hat
  • cpe:/a:redhat:ai_inference_server:3.2::el9 Versions 3.2 — ·Red Hat
  • cpe:/a:redhat:ai_inference_server:3.3::el9 Versions 3.3 — ·Red Hat
  • cpe:/a:redhat:hummingbird:1 Versions 1 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:3.3::el9 Versions 3.3 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:3.4::el9 Versions 3.4 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:3.5::el9 Versions 3.5 — ·Red Hat
  • cpe:/a:redhat:ai_inference_server:3 Versions 3 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:10 Versions 10 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8 Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9 Versions 9 — ·Red Hat
  • cpe:/a:redhat:openshift_ai Versions — — ·Red Hat

Remediation

Red Hat 58 advisories

  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:76043 Released 2026-10-05 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.7 security update
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
  • RHSA-2026:76042 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (CUDA)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
Show 55 more Red Hat advisories
  • RHSA-2026:76041 Released 2026-10-05 · Red Hat rating Important
    Red Hat Enterprise Linux AI 3.3.7 security update
    • Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
  • RHSA-2026:75660 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (Spyre)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:75659 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (ROCm 7.14)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
  • RHSA-2026:75658 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (TPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:75657 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (CUDA 13.0)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:75654 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:75652 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (CPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:74771 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (Gaudi)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:71401 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (ROCm 7.14)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
  • RHSA-2026:71399 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (CUDA 12.9)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:71398 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (Spyre)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:71396 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (CUDA 13.0)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:71397 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (Rubin)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
  • RHSA-2026:71395 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (Gaudi)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:71394 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (TPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:71393 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (CPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:71392 Released 2026-09-24 · Red Hat rating Important
    Red Hat AI Base Images 3.5.1 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:69935 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (ROCm 6.4)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:69934 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:69933 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (CUDA 12.9)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:69932 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (ROCm 7.1)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
  • RHSA-2026:69931 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (Spyre)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:69930 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (Gaudi)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:69929 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (CPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:69927 Released 2026-09-22 · Red Hat rating Important
    Red Hat AI Base Images 3.4.2 (TPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:68710 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Base Images 3.3.3 (CUDA)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:68709 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Base Images 3.3.3 (Spyre)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:68708 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Base Images 3.3.3 (CPU)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:68699 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.7 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:68698 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.7 (ROCm)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:68697 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.7 (Spyre)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
  • RHSA-2026:68696 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.3.7 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:68639 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Base Images 3.3.3 (TPU)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:68638 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Base Images 3.3.3 (CUDA 13.0)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:68637 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Base Images 3.3.3 (ROCm 7.0)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-7.0-rhel9
  • RHSA-2026:68640 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Base Images 3.3.3 (ROCm 6.4)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:68634 Released 2026-09-17 · Red Hat rating Important
    Red Hat AI Base Images 3.3.3 (Neuron)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:61629 Released 2026-08-31 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:61628 Released 2026-08-31 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:61627 Released 2026-08-31 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:60520 Released 2026-08-27 · Red Hat rating Critical
    RHOAI 3.4.4 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9 +47
  • RHSA-2026:54339 Released 2026-08-12 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) firefox-140.13.0-1.el8_8
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) firefox-140.13.0-1.el8_8
  • RHSA-2026:54248 Released 2026-08-12 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) firefox-140.13.0-1.el7_9
  • RHSA-2026:54249 Released 2026-08-12 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) firefox-140.13.0-1.el9_6, firefox-x11-140.13.0-1.el9_6
  • RHSA-2026:54259 Released 2026-08-12 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) firefox-140.13.0-1.el8_6
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) firefox-140.13.0-1.el8_6
  • RHSA-2026:54182 Released 2026-08-12 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) firefox-140.13.0-1.el9_4, firefox-x11-140.13.0-1.el9_4
  • RHSA-2026:54181 Released 2026-08-12 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) firefox-140.13.0-1.el10_0
  • RHSA-2026:54185 Released 2026-08-12 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) firefox-140.13.0-1.el9_2, firefox-x11-140.13.0-1.el9_2
  • RHSA-2026:54180 Released 2026-08-12 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) firefox-140.13.0-1.el8_4
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) firefox-140.13.0-1.el8_4
  • RHSA-2026:51146 Released 2026-08-06 · Red Hat rating Important
    RHEL AI 3.4 RPM runtime CVE fix - aom
    • Red Hat Enterprise Linux AI 3.4 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1
  • RHSA-2026:51100 Released 2026-08-06 · Red Hat rating Important
    RHEL AI 3.3 RPM runtime CVE fix - aom
    • Red Hat Enterprise Linux AI 3.3 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1
  • RHSA-2026:47104 Released 2026-08-03 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream (v. 9) firefox-140.13.0-1.el9_8, firefox-x11-140.13.0-1.el9_8
  • RHSA-2026:47105 Released 2026-07-28 · Red Hat rating Important
    firefox security update
    • Red Hat Enterprise Linux AppStream (v. 8) firefox-140.13.0-1.el8_10
  • RHSA-2026:42875 Released 2026-07-21 · Red Hat rating Important
    RHEL AI 3.5 RPM runtime CVE fix - aom
    • Red Hat Enterprise Linux AI 3.5 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1
  • RHSA-2026:30814 Released 2026-06-28 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images aom-3.14.0-0.1.hum1@aarch64, aom-3.14.0-0.1.hum1@src, aom-3.14.0-0.1.hum1@x86_64 +6

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:30814

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:42875

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
Show 36 more groups
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:51100

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:51146

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:61627

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:61628

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:61629

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68634

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68637

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68638

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68639

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68640

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68696

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68697

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68698

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68699

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68708

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68709

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68710

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69927

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69929

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69930

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69931

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69932

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69933

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69934

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69935

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71392

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71393

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71394

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71395

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71396

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71397

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71398

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71399

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71401

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:76041

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →
  • Advisory ·

    Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:76043

    4 records Highest priority Priority LOW 4 LOW

    Other records, highest priority first

    • TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
    • TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
    • TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
    Show all 4 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat AI Inference ServerAffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat AI Inference Server 3.2Fixed RHSA-2026:61627, RHSA-2026:61628, RHSA-2026:61629
Red Hat AI Inference Server 3.3Fixed RHSA-2026:68696, RHSA-2026:68697, RHSA-2026:68698, RHSA-2026:68699
Red Hat Enterprise Linux AI 3.3Fixed RHSA-2026:76041, RHSA-2026:76043
Red Hat Enterprise Linux AI 3.3 for RHEL 9Fixed RHSA-2026:51100
Red Hat Enterprise Linux AI 3.4 for RHEL 9Fixed RHSA-2026:51146
Red Hat Enterprise Linux AI 3.5 for RHEL 9Fixed RHSA-2026:42875
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:47105
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:47104
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:54180
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:54259
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:54339
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:54185
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:54182
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:54181
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:54249
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:54180
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:54259
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:54339
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:54248
Red Hat Hardened ImagesFixed RHSA-2026:30814
Red Hat OpenShift AI 3.3Fixed RHSA-2026:68634, RHSA-2026:68637, RHSA-2026:68638, RHSA-2026:68639, RHSA-2026:68640, RHSA-2026:68708, RHSA-2026:68709, RHSA-2026:68710
Red Hat OpenShift AI 3.4Fixed RHSA-2026:60520, RHSA-2026:69927, RHSA-2026:69929, RHSA-2026:69930, RHSA-2026:69931, RHSA-2026:69932, RHSA-2026:69933, RHSA-2026:69934, RHSA-2026:69935, RHSA-2026:84734
Red Hat OpenShift AI 3.5Fixed RHSA-2026:71392, RHSA-2026:71393, RHSA-2026:71394, RHSA-2026:71395, RHSA-2026:71396, RHSA-2026:71397, RHSA-2026:71398, RHSA-2026:71399, RHSA-2026:71401, RHSA-2026:74771, RHSA-2026:75652, RHSA-2026:75654, RHSA-2026:75657, RHSA-2026:75658, RHSA-2026:75659, RHSA-2026:75660, RHSA-2026:76042
Not affected: 5 products
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 3.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-56208
  2. 2026-10-03 Alias added: GHSA-mgv2-4j37-m3x6
  3. 2026-10-05 Fix available: rhai/base-image-cpu-rhel9@1790703656, rhai/base-image-cuda-13.0-rhel9@1790703645, rhai/base-image-neuron-rhel9@1790703557 +3 · CNA
  4. 2026-10-05 6 new references · CNA
  5. 2026-10-05 Fix available: RHSA-2026:75659 · Red Hat
  6. 2026-10-05 Fix available: RHSA-2026:75660 · Red Hat
  7. 2026-10-05 Fix available: RHSA-2026:75657 · Red Hat
  8. 2026-10-05 Fix available: RHSA-2026:75654 · Red Hat
  9. 2026-10-05 Fix available: RHSA-2026:75652 · Red Hat
  10. 2026-10-05 Fix available: RHSA-2026:75658 · Red Hat
  11. 2026-10-05 Affected versions changed · Red Hat
  12. 2026-10-06 Fix available: rhai/base-image-cuda-12.9-rhel9@1790703706, rhelai3/bootc-aws-cuda-rhel9@1790936334, rhelai3/bootc-azure-cuda-rhel9@1790936351 +5 · CNA
  13. 2026-10-06 3 new references · CNA
  14. 2026-10-06 Fix available: RHSA-2026:76042 · Red Hat
  15. 2026-10-06 Fix available: RHSA-2026:76043 · Red Hat
  16. 2026-10-06 Fix available: RHSA-2026:76041 · Red Hat
  17. 2026-10-06 Fix available: Red Hat Enterprise Linux AI 3.3 · Red Hat
  18. 2026-10-10 Affected versions changed · CNA
  19. 2026-10-19 Fix available: rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@1791785804 · CNA
  20. 2026-10-19 1 new reference · CNA
  21. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  22. 2026-10-20 Affected versions changed · Red Hat
  23. 2026-11-05 EPSS moved to the 50th–90th percentile
  24. 2026-11-06 Affected versions changed · CNA
  25. 2026-11-06 Affected versions changed · Red Hat
  26. 2026-11-07 EPSS moved to the below the 50th percentile

References

Advisory 58

Other 4

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7412 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences