RHSA-2026:68710

Vulnerability from csaf_redhat - Published: 2026-09-17 18:27 - Updated: 2026-09-21 11:29
Summary
Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (CUDA)
Severity
Important
Notes
Topic: Red Hat AI Base Images 3.3.3 (CUDA) is now available.
Details: Red Hat® AI Base Images
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-48586

A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data (also known as data amplification), allows a remote attacker to cause a Denial of Service (DoS) by sending specially crafted, highly compressed data. The affected component fails to properly manage the expansion of this data, leading to resource exhaustion and system unavailability.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64 —
Vendor Fix fix
Unresolved product id: Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64 —
Vendor Fix fix
Threats
Impact Important
CVE-2026-55969

A flaw was found in Apache Thrift's C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-190 - Integer Overflow or Wraparound
Affected products
Fixed 2 products, the same list as for CVE-2026-48586
Threats
Impact Important
CVE-2026-56208

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.

7.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CWE-122 - Heap-based Buffer Overflow
Affected products
Fixed 2 products, the same list as for CVE-2026-48586
Threats
Impact Important
CVE-2026-56209

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel values. The encoder then writes approximately 1,200 bytes at the attacker-controlled address. This is fully deterministic and does not require a separate information leak. An attacker who can supply frames to a network-facing libaom encoder with SVC enabled could exploit this for denial of service or potential code execution.

7.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 2 products, the same list as for CVE-2026-48586
Threats
Impact Important
CVE-2026-56210

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an out-of-bounds heap read of approximately 40,728 bytes when computing a layer context array index. An attacker who can influence SVC encoder parameters in a network-facing service could exploit this for information disclosure (heap content leak) or denial of service (segmentation fault from hitting unmapped memory).

7.1 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
CWE-125 - Out-of-bounds Read
Affected products
Fixed 2 products, the same list as for CVE-2026-48586
Threats
Impact Important
CVE-2026-56211

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.

7.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H
CWE-787 - Out-of-bounds Write
Affected products
Fixed 2 products, the same list as for CVE-2026-48586
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:68710 self
https://access.redhat.com/security/cve/CVE-2026-48586 external
https://access.redhat.com/security/cve/CVE-2026-55969 external
https://access.redhat.com/security/cve/CVE-2026-56208 external
https://access.redhat.com/security/cve/CVE-2026-56209 external
https://access.redhat.com/security/cve/CVE-2026-56210 external
https://access.redhat.com/security/cve/CVE-2026-56211 external
https://access.redhat.com/security/updates/classi… external
https://www.redhat.com/en/products/ai external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-48586 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507434 external
https://www.cve.org/CVERecord?id=CVE-2026-48586 external
https://nvd.nist.gov/vuln/detail/CVE-2026-48586 external
http://www.openwall.com/lists/oss-security/2026/0… external
https://lists.apache.org/thread/7v3jhgwfbmhx42424… external
https://lists.apache.org/thread/p008svsjf9p6bj47w… external
https://access.redhat.com/security/cve/CVE-2026-55969 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507433 external
https://www.cve.org/CVERecord?id=CVE-2026-55969 external
https://nvd.nist.gov/vuln/detail/CVE-2026-55969 external
http://www.openwall.com/lists/oss-security/2026/0… external
https://lists.apache.org/thread/xmkgd107k795hyrg5… external
https://access.redhat.com/security/cve/CVE-2026-56208 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490799 external
https://www.cve.org/CVERecord?id=CVE-2026-56208 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56208 external
https://aomedia.googlesource.com/aom/+/243f8ae84b external
https://issues.chromium.org/issues/504317456 external
https://access.redhat.com/security/cve/CVE-2026-56209 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490800 external
https://www.cve.org/CVERecord?id=CVE-2026-56209 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56209 external
https://aomedia.googlesource.com/aom/+/a93ba0ffaa external
https://issues.chromium.org/issues/503993984 external
https://access.redhat.com/security/cve/CVE-2026-56210 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490801 external
https://www.cve.org/CVERecord?id=CVE-2026-56210 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56210 external
https://issues.chromium.org/issues/503975732 external
https://access.redhat.com/security/cve/CVE-2026-56211 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490802 external
https://www.cve.org/CVERecord?id=CVE-2026-56211 external
https://nvd.nist.gov/vuln/detail/CVE-2026-56211 external
https://issues.chromium.org/issues/503993985 external
Acknowledgments
FuzzAnything The FuzzAnything Team
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AI Base Images 3.3.3 (CUDA) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat\u00ae AI Base Images",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:68710",
        "url": "https://access.redhat.com/errata/RHSA-2026:68710"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48586",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48586"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-55969",
        "url": "https://access.redhat.com/security/cve/CVE-2026-55969"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56208",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56208"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56209",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56209"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56210",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56210"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-56211",
        "url": "https://access.redhat.com/security/cve/CVE-2026-56211"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://www.redhat.com/en/products/ai",
        "url": "https://www.redhat.com/en/products/ai"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68710.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (CUDA)",
    "tracking": {
      "current_release_date": "2026-09-21T11:29:23+00:00",
      "generator": {
        "date": "2026-09-21T11:29:23+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:68710",
      "initial_release_date": "2026-09-17T18:27:06+00:00",
      "revision_history": [
        {
          "date": "2026-09-17T18:27:06+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-17T18:27:09+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-21T11:29:23+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat OpenShift AI 3.3",
                "product": {
                  "name": "Red Hat OpenShift AI 3.3",
                  "product_id": "Red Hat OpenShift AI 3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift_ai:3.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat OpenShift AI"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64",
                "product": {
                  "name": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64",
                  "product_id": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/base-image-cuda-12.9-rhel9@sha256%3Af1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9?arch=amd64\u0026repository_url=registry.redhat.io/rhai/base-image-cuda-12.9-rhel9\u0026tag=1789137636"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
                "product": {
                  "name": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
                  "product_id": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/base-image-cuda-12.9-rhel9@sha256%3Aa0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a?arch=arm64\u0026repository_url=registry.redhat.io/rhai/base-image-cuda-12.9-rhel9\u0026tag=1789137636"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64 as a component of Red Hat OpenShift AI 3.3",
          "product_id": "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64"
        },
        "product_reference": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
        "relates_to_product_reference": "Red Hat OpenShift AI 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64 as a component of Red Hat OpenShift AI 3.3",
          "product_id": "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
        },
        "product_reference": "registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64",
        "relates_to_product_reference": "Red Hat OpenShift AI 3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-48586",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-07-27T12:01:11.736259+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507434"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data (also known as data amplification), allows a remote attacker to cause a Denial of Service (DoS) by sending specially crafted, highly compressed data. The affected component fails to properly manage the expansion of this data, leading to resource exhaustion and system unavailability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in Apache Thrift\u0027s handling of highly compressed data can lead to a denial of service. Remote, unauthenticated attackers could exploit this flaw by sending specially crafted compressed data, causing excessive resource consumption and disrupting the availability of services utilizing vulnerable Thrift bindings in Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48586"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507434",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507434"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48586",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48586"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48586",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48586"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/24/37",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/24/37"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq",
          "url": "https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq"
        }
      ],
      "release_date": "2026-07-27T11:02:54.430000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-17T18:27:06+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68710",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68710"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data"
    },
    {
      "cve": "CVE-2026-55969",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-07-27T12:01:08.265881+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507433"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Thrift\u0027s C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability in Apache Thrift bindings, rated as Important, allows a remote attacker to trigger a denial of service. The integer overflow or wraparound flaw can lead to affected services becoming unavailable, impacting the reliability of systems utilizing vulnerable Thrift components across Red Hat products such as OpenShift Container Platform and Red Hat Ceph Storage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507433",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-55969",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/07/24/40",
          "url": "http://www.openwall.com/lists/oss-security/2026/07/24/40"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
          "url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
        },
        {
          "category": "external",
          "summary": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo",
          "url": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo"
        }
      ],
      "release_date": "2026-07-27T11:07:53.785000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-17T18:27:06+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68710",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68710"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "The FuzzAnything Team"
          ],
          "organization": "FuzzAnything"
        }
      ],
      "cve": "CVE-2026-56208",
      "cwe": {
        "id": "CWE-122",
        "name": "Heap-based Buffer Overflow"
      },
      "discovery_date": "2026-06-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490799"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder\u0027s Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important severity because a heap buffer overflow with attacker-influenced data can cause reliable denial of service and potentially lead to code execution, though the attacker has only indirect control over the written values (encoder-computed statistics). In Red Hat products, libaom ships bundled within Firefox and Thunderbird as a statically-linked dependency used for AV1 decoding and WebRTC encoding. The vulnerable code path requires the encoder to be configured with g_lag_in_frames \u003e= 1 (Look-Ahead Processing mode). In Firefox\u0027s WebRTC implementation, the encoder configuration is controlled by the browser itself and not exposed to remote peers, which significantly limits the attack surface compared to standalone transcoding services. RHEL-AI 3.4 and Hummingbird 1 ship standalone libaom (aom) packages at versions within the affected range. Applications on those platforms that use the libaom encoder API with LAP mode and accept untrusted configuration input are vulnerable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56208"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490799",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490799"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56208",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56208"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56208",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56208"
        },
        {
          "category": "external",
          "summary": "https://aomedia.googlesource.com/aom/+/243f8ae84b",
          "url": "https://aomedia.googlesource.com/aom/+/243f8ae84b"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/504317456",
          "url": "https://issues.chromium.org/issues/504317456"
        }
      ],
      "release_date": "2026-06-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-17T18:27:06+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68710",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68710"
        },
        {
          "category": "workaround",
          "details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If using libaom as a standalone encoder library, avoid setting g_lag_in_frames to values \u003e= 1 when processing untrusted input, or validate all encoder configuration parameters before passing them to the libaom API.\n2. For Firefox and Thunderbird, ensure browsers are updated to versions that include the patched libaom (v3.14.0 or later).\n3. For standalone libaom deployments (RHEL-AI, Hummingbird), restrict access to the encoding service to trusted clients only.\n4. Apply network-level access controls to limit who can submit video for encoding.",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "The FuzzAnything Team"
          ],
          "organization": "FuzzAnything"
        }
      ],
      "cve": "CVE-2026-56209",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-06-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490800"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel values. The encoder then writes approximately 1,200 bytes at the attacker-controlled address. This is fully deterministic and does not require a separate information leak. An attacker who can supply frames to a network-facing libaom encoder with SVC enabled could exploit this for denial of service or potential code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libaom: libaom: arbitrary address write via SVC layer context OOB and cyclic refresh map pointer hijack",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Critical severity because it provides a fully deterministic arbitrary address write primitive that requires no information leak and is self-bootstrapping from attacker-controlled pixel values. The 1,200-byte write at an attacker-chosen address is sufficient for control flow hijacking. In Red Hat products, libaom ships bundled within Firefox and Thunderbird. The vulnerable code path requires the SVC (Scalable Video Coding) encoder feature to be enabled and the attacker to control both the layer_id configuration and the image frame pixel values. In Firefox\u0027s WebRTC implementation, SVC encoding parameters and frame submission are managed internally by the browser; a remote peer cannot directly set arbitrary layer IDs or inject pixel values into the local encoder. This significantly reduces exploitability in the browser context. RHEL-AI 3.4 (aom 3.12.0) and Hummingbird 1 (aom 3.13.3) ship standalone libaom packages within the affected version range. Services on those platforms that expose the SVC encoder API with attacker-controlled layer configuration and frame input are at highest risk.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56209"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490800",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490800"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56209",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56209"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56209",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56209"
        },
        {
          "category": "external",
          "summary": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa",
          "url": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/503993984",
          "url": "https://issues.chromium.org/issues/503993984"
        }
      ],
      "release_date": "2026-06-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-17T18:27:06+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68710",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68710"
        },
        {
          "category": "workaround",
          "details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If using libaom as a standalone encoder library with SVC enabled, validate that spatial_layer_id and temporal_layer_id values are within the configured range [0, configured_layers) before calling aom_codec_control with AV1E_SET_SVC_LAYER_ID.\n2. Restrict access to encoding services to trusted clients only. Do not expose libaom SVC encoder configuration to untrusted input.\n3. For Firefox and Thunderbird, ensure browsers are updated to versions that include the patched libaom (v3.14.0 or later).\n4. Deploy encoding services with ASLR, stack canaries, and other exploit mitigation technologies enabled.",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libaom: libaom: arbitrary address write via SVC layer context OOB and cyclic refresh map pointer hijack"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "The FuzzAnything Team"
          ],
          "organization": "FuzzAnything"
        }
      ],
      "cve": "CVE-2026-56210",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-06-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490801"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an out-of-bounds heap read of approximately 40,728 bytes when computing a layer context array index. An attacker who can influence SVC encoder parameters in a network-facing service could exploit this for information disclosure (heap content leak) or denial of service (segmentation fault from hitting unmapped memory).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important severity because the 40KB out-of-bounds heap read can disclose sensitive information from adjacent heap allocations (including pointers useful for ASLR bypass in chained attacks) and reliably causes denial of service by hitting unmapped pages. In Red Hat products, libaom ships bundled within Firefox and Thunderbird. The vulnerable code path requires the SVC encoder feature to be enabled and an attacker to set spatial_layer_id to a value exceeding the number of configured spatial layers. In Firefox\u0027s WebRTC implementation, SVC layer parameters are managed internally by the browser and not directly exposed to remote peers, which limits exploitability. RHEL-AI 3.4 (aom 3.12.0) and Hummingbird 1 (aom 3.13.3) ship standalone libaom packages within the affected version range. Services that expose SVC encoder layer configuration to untrusted input are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56210"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490801",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490801"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56210",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56210"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56210",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56210"
        },
        {
          "category": "external",
          "summary": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa",
          "url": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/503975732",
          "url": "https://issues.chromium.org/issues/503975732"
        }
      ],
      "release_date": "2026-06-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-17T18:27:06+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68710",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68710"
        },
        {
          "category": "workaround",
          "details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If using libaom as a standalone encoder library with SVC enabled, validate that spatial_layer_id does not exceed the number of configured spatial layers before calling aom_codec_control with AV1E_SET_SVC_LAYER_ID.\n2. Restrict access to encoding services to trusted clients only.\n3. For Firefox and Thunderbird, ensure browsers are updated to versions that include the patched libaom (v3.14.0 or later).\n4. Monitor encoding service processes for unexpected crashes (segfaults) that may indicate exploitation attempts.",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "The FuzzAnything Team"
          ],
          "organization": "FuzzAnything"
        }
      ],
      "cve": "CVE-2026-56211",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-06-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490802"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder\u0027s SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libaom: libaom: remote code execution via SVC layer context handling with attacker-controlled frames",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Critical severity because the researcher demonstrated successful remote code execution against a fork-based video processing service. The exploit chain leverages attacker-controlled pixel values to hijack internal encoder pointers, uses a crash oracle to brute-force ASLR, and ultimately achieves arbitrary command execution. However, the attack complexity is elevated: it requires a fork-based service architecture (for the crash oracle), multiple encoding attempts (for ASLR brute-force), and knowledge of the target binary layout. In Red Hat products, libaom ships bundled within Firefox and Thunderbird. Firefox does not use a fork-based architecture for WebRTC encoding, and SVC layer parameters are managed internally, making the demonstrated exploit chain not directly applicable to the browser context. RHEL-AI 3.4 (aom 3.12.0) and Hummingbird 1 (aom 3.13.3) ship standalone libaom packages within the affected version range. Fork-based transcoding or video conferencing services that use libaom with SVC encoding and accept attacker-supplied frames are at highest risk for this specific exploit chain.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
          "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-56211"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490802",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490802"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-56211",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-56211"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56211",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56211"
        },
        {
          "category": "external",
          "summary": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa",
          "url": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa"
        },
        {
          "category": "external",
          "summary": "https://issues.chromium.org/issues/503993985",
          "url": "https://issues.chromium.org/issues/503993985"
        }
      ],
      "release_date": "2026-06-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-17T18:27:06+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68710",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68710"
        },
        {
          "category": "workaround",
          "details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If using libaom as a standalone encoder in a fork-based service, validate all SVC layer parameters (spatial_layer_id, temporal_layer_id) against configured bounds before passing them to the encoder API.\n2. Avoid fork-based architectures for encoding services that accept untrusted input. Use thread-based or container-isolated workers instead, which prevent crash oracle attacks.\n3. Restrict access to encoding services to trusted clients only. Do not expose SVC encoder configuration or frame submission to untrusted network input.\n4. For Firefox and Thunderbird, ensure browsers are updated to versions that include the patched libaom (v3.14.0 or later).\n5. Enable all available exploit mitigations (ASLR, PIE, stack canaries, CFI) on encoding service binaries.",
          "product_ids": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:a0893a325c7b5106c9cf8822aa421bc150356c7323d5c3b02bb0747469c1532a_arm64",
            "Red Hat OpenShift AI 3.3:registry.redhat.io/rhai/base-image-cuda-12.9-rhel9@sha256:f1e3abf0122f44dafb1a8613a724226ac0991e004bef0c5ad052f2f6dde017c9_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libaom: libaom: remote code execution via SVC layer context handling with attacker-controlled frames"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.