Vulnerabilities

TI-2026-40576 CVE-2026-56211 · GHSA-qr4p-j2pf-4w4x

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

LOW 35

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00876 Published 2026-06-19 Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-787

TI-2026-40575 CVE-2026-56210 · GHSA-xpjh-7q9g-cgj5

LOW 32

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00578 Published 2026-06-19 Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-125

TI-2026-40573 CVE-2026-56208 · GHSA-mgv2-4j37-m3x6

LOW 36

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00454 Published 2026-06-19 Partial fix · 140.13.0-1.el10_0, 140.13.0-1.el7_9 +57 CWE-122

TI-2026-40574 CVE-2026-56209 · GHSA-8vmr-q5h8-3vc5

LOW 34

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00643 Published 2026-06-19 Partial fix · 3.14.0-1.el9ai, 1787860580 +47 CWE-787