Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames
Priority LOW 35CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- Low · High · High
- Fix status
- Partial Red Hat: 10 fixed, 3 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00876 59th percentileScored 2026-11-07
Fix Partial Red Hat: 48 advisoriesRed Hat: 10 fixed, 3 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux AI 3.3 for RHEL 9 | — | 3.14.0-1.el9ai | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.4 for RHEL 9 | — | 3.14.0-1.el9ai | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.5 for RHEL 9 | — | 3.14.0-1.el9ai | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1787860580 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1787772157 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.2 | — | 1787884873 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1789508287 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1789502493 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1789504371 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.3 | — | 1789582776 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790936334 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790936351 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790850900 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790866732 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790936334 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790791893 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | — | 1790954179 | Patch available | CNA |
| Red Hat | Red Hat Hardened Images | — | 3.14.0-0.1.hum1 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137552 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137548 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137636 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137548 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137548 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137641 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137607 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.3 | — | 1789137636 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1786611800 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1787076778 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1787077779 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1787076481 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197680 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197530 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197632 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197747 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197549 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788199622 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197744 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1788197677 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1791785804 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788198404 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788198407 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197492 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197542 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197975 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197512 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197688 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788197385 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1788198016 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703552 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703656 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703557 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703645 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703554 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703554 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703630 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.5 | — | 1790703706 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat AI Inference Server | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
- Red Hat Enterprise Linux AI 3.3 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-1.el9ai Patch available CNA
- Red Hat Enterprise Linux AI 3.4 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-1.el9ai Patch available CNA
- Red Hat Enterprise Linux AI 3.5 for RHEL 9 VendorRed Hat Affected — Fixed in 3.14.0-1.el9ai Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1787860580 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1787772157 Patch available CNA
- Red Hat AI Inference Server 3.2 VendorRed Hat Affected — Fixed in 1787884873 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789508287 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789502493 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789504371 Patch available CNA
- Red Hat AI Inference Server 3.3 VendorRed Hat Affected — Fixed in 1789582776 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790936334 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790936351 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790850900 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790866732 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790936334 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790791893 Patch available CNA
- Red Hat Enterprise Linux AI 3.3 VendorRed Hat Affected — Fixed in 1790954179 Patch available CNA
- Red Hat Hardened Images VendorRed Hat Affected — Fixed in 3.14.0-0.1.hum1 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137552 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137548 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137636 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137548 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137548 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137641 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137607 Patch available CNA
- Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789137636 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1786611800 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1787076778 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1787077779 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1787076481 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197680 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197530 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197632 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197747 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197549 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788199622 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197744 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1788197677 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1791785804 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788198404 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788198407 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197492 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197542 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197975 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197512 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197688 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788197385 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1788198016 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703552 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703656 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703557 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703645 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703554 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703630 Patch available CNA
- Red Hat OpenShift AI 3.5 VendorRed Hat Affected — Fixed in 1790703706 Patch available CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat AI Inference Server VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
CPE names CNA · 13
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:enterprise_linux_ai:3.3::el9 | 3.3 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux_ai:3.4::el9 | 3.4 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux_ai:3.5::el9 | 3.5 | — | Red Hat |
| cpe:/a:redhat:ai_inference_server:3.2::el9 | 3.2 | — | Red Hat |
| cpe:/a:redhat:ai_inference_server:3.3::el9 | 3.3 | — | Red Hat |
| cpe:/a:redhat:hummingbird:1 | 1 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.3::el9 | 3.3 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.4::el9 | 3.4 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.5::el9 | 3.5 | — | Red Hat |
| cpe:/a:redhat:ai_inference_server:3 | 3 | — | Red Hat |
- cpe:/a:redhat:enterprise_linux_ai:3.3::el9 Versions 3.3 — ·Red Hat
- cpe:/a:redhat:enterprise_linux_ai:3.4::el9 Versions 3.4 — ·Red Hat
- cpe:/a:redhat:enterprise_linux_ai:3.5::el9 Versions 3.5 — ·Red Hat
- cpe:/a:redhat:ai_inference_server:3.2::el9 Versions 3.2 — ·Red Hat
- cpe:/a:redhat:ai_inference_server:3.3::el9 Versions 3.3 — ·Red Hat
- cpe:/a:redhat:hummingbird:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.3::el9 Versions 3.3 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.4::el9 Versions 3.4 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.5::el9 Versions 3.5 — ·Red Hat
- cpe:/a:redhat:ai_inference_server:3 Versions 3 — ·Red Hat
Remediation
Red Hat 48 advisories
- RHSA-2026:84734 Released 2026-10-19 · Red Hat rating CriticalRHOAI 3.4.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
- RHSA-2026:76043 Released 2026-10-05 · Red Hat rating ImportantRed Hat Enterprise Linux AI 3.3.7 security update
- Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
- RHSA-2026:76042 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CUDA)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
Show 45 more Red Hat advisories
- RHSA-2026:76041 Released 2026-10-05 · Red Hat rating ImportantRed Hat Enterprise Linux AI 3.3.7 security update
- Red Hat Enterprise Linux AI 3.3 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
- RHSA-2026:75660 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Spyre)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:75659 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (ROCm 7.14)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
- RHSA-2026:75658 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (TPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:75657 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CUDA 13.0)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:75654 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:75652 Released 2026-10-05 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (CPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74771 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.5.2 (Gaudi)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:71401 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (ROCm 7.14)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
- RHSA-2026:71399 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (CUDA 12.9)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:71398 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (Spyre)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:71396 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (CUDA 13.0)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:71397 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (Rubin)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
- RHSA-2026:71395 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (Gaudi)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:71394 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (TPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:71393 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (CPU)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:71392 Released 2026-09-24 · Red Hat rating ImportantRed Hat AI Base Images 3.5.1 (Neuron)
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:69935 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (ROCm 6.4)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
- RHSA-2026:69934 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (CUDA 13.0)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:69933 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (CUDA 12.9)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:69932 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (ROCm 7.1)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
- RHSA-2026:69931 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (Spyre)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:69930 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (Gaudi)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
- RHSA-2026:69929 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (CPU)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:69927 Released 2026-09-22 · Red Hat rating ImportantRed Hat AI Base Images 3.4.2 (TPU)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:68710 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (CUDA)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
- RHSA-2026:68709 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (Spyre)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:68708 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (CPU)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:68699 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Inference Server 3.3.7 (CUDA)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2026:68698 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Inference Server 3.3.7 (ROCm)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:68697 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Inference Server 3.3.7 (Spyre)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
- RHSA-2026:68696 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.3.7 (CUDA)
- Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:68639 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (TPU)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:68638 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (CUDA 13.0)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
- RHSA-2026:68637 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (ROCm 7.0)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-7.0-rhel9
- RHSA-2026:68640 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (ROCm 6.4)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
- RHSA-2026:68634 Released 2026-09-17 · Red Hat rating ImportantRed Hat AI Base Images 3.3.3 (Neuron)
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:61629 Released 2026-08-31 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (ROCm)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:61628 Released 2026-08-31 · Red Hat rating ImportantRed Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
- RHSA-2026:61627 Released 2026-08-31 · Red Hat rating ImportantRed Hat AI Inference Server 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2026:60520 Released 2026-08-27 · Red Hat rating CriticalRHOAI 3.4.4 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9 +47
- RHSA-2026:51146 Released 2026-08-06 · Red Hat rating ImportantRHEL AI 3.4 RPM runtime CVE fix - aom
- Red Hat Enterprise Linux AI 3.4 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1
- RHSA-2026:51100 Released 2026-08-06 · Red Hat rating ImportantRHEL AI 3.3 RPM runtime CVE fix - aom
- Red Hat Enterprise Linux AI 3.3 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1
- RHSA-2026:42875 Released 2026-07-21 · Red Hat rating ImportantRHEL AI 3.5 RPM runtime CVE fix - aom
- Red Hat Enterprise Linux AI 3.5 for RHEL 9 aom-3.14.0-1.el9ai, libaom-3.14.0-1.el9ai, libaom-devel-3.14.0-1.el9ai +1
- RHSA-2026:30814 Released 2026-06-28 · Red Hat rating ImportantRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images aom-3.14.0-0.1.hum1@aarch64, aom-3.14.0-0.1.hum1@src, aom-3.14.0-0.1.hum1@x86_64 +6
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:30814
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:42875
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
Show 36 more groups
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:51100
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:51146
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:61627
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:61628
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:61629
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68634
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68637
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68638
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68639
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68640
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68696
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68697
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68698
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68699
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68708
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68709
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:68710
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69927
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69929
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69930
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69931
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69932
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69933
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69934
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:69935
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71392
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71393
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71394
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71395
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71396
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71397
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71398
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71399
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:71401
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:76041
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
- Advisory ·
Red Hat AI Inference Server, Red Hat AI Inference Server 3.2 and 12 more products — RHSA-2026:76043
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40573 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modePriority LOW 36
- TI-2026-40574 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackPriority LOW 34
- TI-2026-40575 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idPriority LOW 32
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
Not affected: 2 products
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift AI 3.4
Timeline
- 2026-10-02 Threatist record created from CVE-2026-56211
- 2026-10-03 Alias added: GHSA-qr4p-j2pf-4w4x
- 2026-10-05 Fix available: rhai/base-image-cpu-rhel9@1790703656, rhai/base-image-cuda-13.0-rhel9@1790703645, rhai/base-image-neuron-rhel9@1790703557 +3 · CNA
- 2026-10-05 6 new references · CNA
- 2026-10-05 Fix available: RHSA-2026:75659 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75660 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75657 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75654 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75652 · Red Hat
- 2026-10-05 Fix available: RHSA-2026:75658 · Red Hat
- 2026-10-05 Affected versions changed · Red Hat
- 2026-10-06 Fix available: rhai/base-image-cuda-12.9-rhel9@1790703706, rhelai3/bootc-aws-cuda-rhel9@1790936334, rhelai3/bootc-azure-cuda-rhel9@1790936351 +5 · CNA
- 2026-10-06 3 new references · CNA
- 2026-10-06 Fix available: RHSA-2026:76042 · Red Hat
- 2026-10-06 Fix available: RHSA-2026:76043 · Red Hat
- 2026-10-06 Fix available: RHSA-2026:76041 · Red Hat
- 2026-10-06 Fix available: Red Hat Enterprise Linux AI 3.3 · Red Hat
- 2026-10-10 Affected versions changed · CNA
- 2026-10-19 Fix available: rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@1791785804 · CNA
- 2026-10-19 1 new reference · CNA
- 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
- 2026-10-20 Affected versions changed · Red Hat
References
Advisory 48
- RHSA-2026:30814
- RHSA-2026:42875
- RHSA-2026:51100
- RHSA-2026:51146
- RHSA-2026:60520
- RHSA-2026:61627
- RHSA-2026:61628
- RHSA-2026:61629
- RHSA-2026:68634
- RHSA-2026:68637
- RHSA-2026:68638
- RHSA-2026:68639
- RHSA-2026:68640
- RHSA-2026:68696
- RHSA-2026:68697
- RHSA-2026:68698
- RHSA-2026:68699
- RHSA-2026:68708
- RHSA-2026:68709
- RHSA-2026:68710
- RHSA-2026:69927
- RHSA-2026:69929
- RHSA-2026:69930
- RHSA-2026:69931
- RHSA-2026:69932
- RHSA-2026:69933
- RHSA-2026:69934
- RHSA-2026:69935
- RHSA-2026:71392
- RHSA-2026:71393
- RHSA-2026:71394
- RHSA-2026:71395
- RHSA-2026:71396
- RHSA-2026:71397
- RHSA-2026:71398
- RHSA-2026:71399
- RHSA-2026:71401
- RHSA-2026:74771
- RHSA-2026:75652
- RHSA-2026:75654
- RHSA-2026:75657
- RHSA-2026:75658
- RHSA-2026:75659
- RHSA-2026:75660
- RHSA-2026:76041
- RHSA-2026:76042
- RHSA-2026:76043
- RHSA-2026:84734
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-56211 · CVE Program
- CVE-2026-56211 · NVD
- FIRST EPSS
- GHSA-qr4p-j2pf-4w4x · GitHub Advisory Database · CC BY 4.0
- CVE-2026-56211 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences