Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
Priority LOW 32CWE-125Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · High
- Fix status
- Partial Red Hat: 10 fixed, 3 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an out-of-bounds heap read of approximately 40,728 bytes when computing a layer context array index. An attacker who can influence SVC encoder parameters in a network-facing service could exploit this for information disclosure (heap content leak) or denial of service (segmentation fault from hitting unmapped memory).
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00578 47th percentileScored 2026-11-07
Fix Partial Red Hat: 48 advisoriesRed Hat: 10 fixed, 3 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux AI 3.3 for RHEL 9 | — | 3.14.0-1.el9ai | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.4 for RHEL 9 | — | 3.14.0-1.el9ai | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 for RHEL 9 | — | 3.14.0-1.el9ai | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1787860580 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1787772157 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1787884873 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1789508287 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1789502493 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1789504371 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1789582776 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790936334 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790936351 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790850900 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790866732 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790936334 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790791893 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790954179 | Patch available | CNA |
| Red Hat | Red Hat Hardened Images | — | 3.14.0-0.1.hum1 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137552 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137548 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137636 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137548 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137548 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137641 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137607 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137636 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1786611800 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1787076778 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1787077779 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1787076481 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197680 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197530 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197632 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197747 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197549 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788199622 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197744 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197677 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1791785804 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788198404 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788198407 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197492 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197542 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197975 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197512 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197688 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197385 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788198016 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703552 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703656 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703557 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703645 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703554 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703554 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703630 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703706 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
- Red Hat Enterprise Linux AI 3.3 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-1.el9ai Patch available CNA
- Red Hat Enterprise Linux AI 3.4 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-1.el9ai Patch available CNA
- Red Hat Enterprise Linux AI 3.5 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-1.el9ai Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1787860580 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1787772157 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1787884873 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789508287 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789502493 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789504371 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789582776 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790936334 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790936351 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790850900 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790866732 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790936334 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790791893 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790954179 Patch available CNA
- Red Hat Hardened Images VendorRed Hat Affected — Fixed in 3.14.0-0.1.hum1 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137552 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137548 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137636 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137548 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137548 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137641 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137607 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137636 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1786611800 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1787076778 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1787077779 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1787076481 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197680 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197530 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197632 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197747 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197549 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788199622 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197744 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197677 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1791785804 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788198404 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788198407 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197492 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197542 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197975 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197512 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197688 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197385 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788198016 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703552 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703656 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703557 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703645 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703630 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703706 Patch available CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
CPE names CNA · 13
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:enterprise_linux_ai:3.3::el9 | 3.3 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux_ai:3.4::el9 | 3.4 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux_ai:3.5::el9 | 3.5 | — | Red Hat |
| cpe:/a:redhat:ai_inference_server:3.2::el9 | 3.2 | — | Red Hat |
| cpe:/a:redhat:ai_inference_server:3.3::el9 | 3.3 | — | Red Hat |
| cpe:/a:redhat:hummingbird:1 | 1 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.3::el9 | 3.3 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.4::el9 | 3.4 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.5::el9 | 3.5 | — | Red Hat |
| cpe:/a:redhat:ai_inference_server:3 | 3 | — | Red Hat |
- cpe:/a:redhat:enterprise_linux_ai:3.3::el9 Versions 3.3 — ·Red Hat
- cpe:/a:redhat:enterprise_linux_ai:3.4::el9 Versions 3.4 — ·Red Hat
- cpe:/a:redhat:enterprise_linux_ai:3.5::el9 Versions 3.5 — ·Red Hat
- cpe:/a:redhat:ai_inference_server:3.2::el9 Versions 3.2 — ·Red Hat
- cpe:/a:redhat:ai_inference_server:3.3::el9 Versions 3.3 — ·Red Hat
- cpe:/a:redhat:hummingbird:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.3::el9 Versions 3.3 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.4::el9 Versions 3.4 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.5::el9 Versions 3.5 — ·Red Hat
- cpe:/a:redhat:ai_inference_server:3 Versions 3 — ·Red Hat
Remediation
Red Hat 48 advisories
- RHSA-2026:84734 Released 2026-10-19 · Red Hat rating CriticalRHOAI 3.4.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
- RHSA-2026:76043 Released 2026-10-05 · Red Hat rating ImportantRed Hat Enterprise Linux AI 3.3.7 security update
- Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
- RHSA-2026:76042 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CUDA)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
Show 45 more Red Hat advisories
- RHSA-2026:76041 Released 2026-10-05 · Red Hat rating ImportantRed Hat Enterprise Linux AI 3.3.7 security update
- Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
- RHSA-2026:75660 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Spyre)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:75659 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (ROCm 7.14)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
- RHSA-2026:75658 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (TPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:75657 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CUDA 13.0)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:75654 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:75652 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74771 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Gaudi)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:71401 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (ROCm 7.14)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
- RHSA-2026:71399 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (CUDA 12.9)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:71398 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (Spyre)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:71396 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (CUDA 13.0)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:71397 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (Rubin)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
- RHSA-2026:71395 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (Gaudi)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:71394 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (TPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:71393 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (CPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:71392 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:69935 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (ROCm 6.4)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
- RHSA-2026:69934 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (CUDA 13.0)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:69933 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (CUDA 12.9)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:69932 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (ROCm 7.1)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
- RHSA-2026:69931 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (Spyre)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:69930 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (Gaudi)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:69929 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (CPU)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:69927 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (TPU)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:68710 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (CUDA)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:68709 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (Spyre)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:68708 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (CPU)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:68699 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Inference Server 3.3.7 (CUDA)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2026:68698 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Inference Server 3.3.7 (ROCm)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:68697 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Inference Server 3.3.7 (Spyre)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
- RHSA-2026:68696 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.3.7 (CUDA)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:68639 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (TPU)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:68638 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (CUDA 13.0)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:68637 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (ROCm 7.0)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-7.0-rhel9
- RHSA-2026:68640 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (ROCm 6.4)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
- RHSA-2026:68634 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (Neuron)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:61629 Released 2026-08-31 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (ROCm)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:61628 Released 2026-08-31 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:61627 Released 2026-08-31 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2026:60520 Released 2026-08-27 · Red Hat rating CriticalRHOAI 3.4.4 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9 +47
- RHSA-2026:51146 Released 2026-08-06 · Red Hat rating ImportantRHEL AI 3.4 RPM runtime CVE fix - aom
- Red Hat Enterprise Linux AI 3.4 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1
- RHSA-2026:51100 Released 2026-08-06 · Red Hat rating ImportantRHEL AI 3.3 RPM runtime CVE fix - aom
- Red Hat Enterprise Linux AI 3.3 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1
- RHSA-2026:42875 Released 2026-07-21 · Red Hat rating ImportantRHEL AI 3.5 RPM runtime CVE fix - aom
- Red Hat Enterprise Linux AI 3.5 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1
- RHSA-2026:30814 Released 2026-06-28 · Red Hat rating ImportantRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images aom-3.14.0-0.1.hum1@aarch64, aom-3.14.0-0.1.hum1@src, aom-3.14.0-0.1.hum1@x86_64 +6
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:30814
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:42875
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
Show 36 more groups
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:51100
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:51146
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:61627
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:61628
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:61629
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68634
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68637
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68638
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68639
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68640
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68696
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68697
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68698
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68699
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68708
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68709
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68710
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69927
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69929
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69930
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69931
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69932
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69933
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69934
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69935
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71392
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71393
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71394
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71395
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71396
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71397
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71398
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71399
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71401
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:76041
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:76043
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40576 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesPriority LOW 35
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 2 products
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift AI 3.4
Timeline
- 2026-10-02 Threatist record created from CVE-2026-56210
- 2026-10-03 Alias added: GHSA-xpjh-7q9g-cgj5
- 2026-10-05 Fix available: rhai/base-image-cpu-rhel9@1790703656, rhai/base-image-cuda-13.0-rhel9@1790703645, rhai/base-image-neuron-rhel9@1790703557 +3 · CNA
- 2026-10-05 6 new references · CNA
- 2026-10-05 Fix available: RHSA-2026:75659 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75660 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75657 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75654 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75652 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75658 · Red Hat
- 2026-10-05 Affected versions changed · Red Hat
- 2026-10-06 Fix available: rhai/base-image-cuda-12.9-rhel9@1790703706, rhelai3/bootc-aws-cuda-rhel9@1790936334, rhelai3/bootc-azure-cuda-rhel9@1790936351 +5 · CNA
- 2026-10-06 3 new references · CNA
- 2026-10-06 Fix available: RHSA-2026:76042 · Red Hat
- 2026-10-06 Fix available: RHSA-2026:76043 · Red Hat
- 2026-10-06 Fix available: RHSA-2026:76041 · Red Hat
- 2026-10-06 Fix available: Red Hat Enterprise Linux AI 3.3 · Red Hat
- 2026-10-10 Affected versions changed · CNA
- 2026-10-19 Fix available: rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@1791785804 · CNA
- 2026-10-19 1 new reference · CNA
- 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
- 2026-10-20 Affected versions changed · Red Hat
References
Advisory 48
- RHSA-2026:30814
- RHSA-2026:42875
- RHSA-2026:51100
- RHSA-2026:51146
- RHSA-2026:60520
- RHSA-2026:61627
- RHSA-2026:61628
- RHSA-2026:61629
- RHSA-2026:68634
- RHSA-2026:68637
- RHSA-2026:68638
- RHSA-2026:68639
- RHSA-2026:68640
- RHSA-2026:68696
- RHSA-2026:68697
- RHSA-2026:68698
- RHSA-2026:68699
- RHSA-2026:68708
- RHSA-2026:68709
- RHSA-2026:68710
- RHSA-2026:69927
- RHSA-2026:69929
- RHSA-2026:69930
- RHSA-2026:69931
- RHSA-2026:69932
- RHSA-2026:69933
- RHSA-2026:69934
- RHSA-2026:69935
- RHSA-2026:71392
- RHSA-2026:71393
- RHSA-2026:71394
- RHSA-2026:71395
- RHSA-2026:71396
- RHSA-2026:71397
- RHSA-2026:71398
- RHSA-2026:71399
- RHSA-2026:71401
- RHSA-2026:74771
- RHSA-2026:75652
- RHSA-2026:75654
- RHSA-2026:75657
- RHSA-2026:75658
- RHSA-2026:75659
- RHSA-2026:75660
- RHSA-2026:76041
- RHSA-2026:76042
- RHSA-2026:76043
- RHSA-2026:84734
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-56210 · CVE Program
- CVE-2026-56210 · NVD
- FIRST EPSS
- GHSA-xpjh-7q9g-cgj5 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-56210 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences