CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, при специфични условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.
Засегнати продукти
- Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9: от 0:3.14.0-1.el9ai нататък
- Red Hat Red Hat Enterprise Linux AI 3.4 for RHEL 9: от 0:3.14.0-1.el9ai нататък
- Red Hat Red Hat Enterprise Linux AI 3.5 for RHEL 9: от 0:3.14.0-1.el9ai нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1787860580 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1787772157 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1787884873 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1789508287 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1789502493 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1789504371 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1789582776 нататък
- Red Hat Red Hat Enterprise Linux AI 3.3: от 1790936334 нататък
- Red Hat Red Hat Enterprise Linux AI 3.3: от 1790936351 нататък
- Red Hat Red Hat Enterprise Linux AI 3.3: от 1790850900 нататък
- Red Hat Red Hat Enterprise Linux AI 3.3: от 1790866732 нататък
- Red Hat Red Hat Enterprise Linux AI 3.3: от 1790936334 нататък
- Red Hat Red Hat Enterprise Linux AI 3.3: от 1790791893 нататък
- Red Hat Red Hat Enterprise Linux AI 3.3: от 1790954179 нататък
- Red Hat Red Hat Hardened Images: от 3.14.0-0.1.hum1 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1789137552 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1789137548 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1789137636 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1789137548 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1789137548 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1789137641 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1789137607 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1789137636 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1786611800 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1787076778 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1787077779 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1787076481 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1788197680 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1788197530 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1788197632 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1788197747 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1788197549 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1788199622 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1788197744 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1788197677 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791785804 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1788198404 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1788198407 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1788197492 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1788197542 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1788197975 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1788197512 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1788197688 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1788197385 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1788198016 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1790703552 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1790703656 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1790703557 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1790703645 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1790703554 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1790703554 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1790703630 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1790703706 нататък
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat AI Inference Server
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
- Red Hat Red Hat OpenShift AI (RHOAI)
Вид слабост
История
- 19 юни 2026 Публикувано
Други уязвимости в Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-56211
- https://nvd.nist.gov/vuln/detail/CVE-2026-56211
- https://access.redhat.com/errata/RHSA-2026:30814
- https://access.redhat.com/errata/RHSA-2026:42875
- https://access.redhat.com/errata/RHSA-2026:51100
- https://access.redhat.com/errata/RHSA-2026:51146
- https://access.redhat.com/errata/RHSA-2026:60520
- https://access.redhat.com/errata/RHSA-2026:61627
- https://access.redhat.com/errata/RHSA-2026:61628
- https://access.redhat.com/errata/RHSA-2026:61629
- https://access.redhat.com/errata/RHSA-2026:68634
- https://access.redhat.com/errata/RHSA-2026:68637
- https://access.redhat.com/errata/RHSA-2026:68638
- https://access.redhat.com/errata/RHSA-2026:68639
- https://access.redhat.com/errata/RHSA-2026:68640
- https://access.redhat.com/errata/RHSA-2026:68696
- https://access.redhat.com/errata/RHSA-2026:68697
- https://access.redhat.com/errata/RHSA-2026:68698
- https://access.redhat.com/errata/RHSA-2026:68699
- https://access.redhat.com/errata/RHSA-2026:68708
- https://access.redhat.com/errata/RHSA-2026:68709
- https://access.redhat.com/errata/RHSA-2026:68710
- https://access.redhat.com/errata/RHSA-2026:69927
- https://access.redhat.com/errata/RHSA-2026:69929
- https://access.redhat.com/errata/RHSA-2026:69930
- https://access.redhat.com/errata/RHSA-2026:69931
- https://access.redhat.com/errata/RHSA-2026:69932
- https://access.redhat.com/errata/RHSA-2026:69933
- https://access.redhat.com/errata/RHSA-2026:69934
- https://access.redhat.com/errata/RHSA-2026:69935
- https://access.redhat.com/errata/RHSA-2026:71392
- https://access.redhat.com/errata/RHSA-2026:71393
- https://access.redhat.com/errata/RHSA-2026:71394
- https://access.redhat.com/errata/RHSA-2026:71395
- https://access.redhat.com/errata/RHSA-2026:71396
- https://access.redhat.com/errata/RHSA-2026:71397
- https://access.redhat.com/errata/RHSA-2026:71398
- https://access.redhat.com/errata/RHSA-2026:71399
- https://access.redhat.com/errata/RHSA-2026:71401
- https://access.redhat.com/errata/RHSA-2026:74771
- https://access.redhat.com/errata/RHSA-2026:75652
- https://access.redhat.com/errata/RHSA-2026:75654
- https://access.redhat.com/errata/RHSA-2026:75657
- https://access.redhat.com/errata/RHSA-2026:75658
- https://access.redhat.com/errata/RHSA-2026:75659
- https://access.redhat.com/errata/RHSA-2026:75660
- https://access.redhat.com/errata/RHSA-2026:76041
- https://access.redhat.com/errata/RHSA-2026:76042
- https://access.redhat.com/errata/RHSA-2026:76043
- https://access.redhat.com/errata/RHSA-2026:84734
- https://access.redhat.com/security/cve/CVE-2026-56211
- https://aomedia.googlesource.com/aom/+/a93ba0ffaa
- https://bugzilla.redhat.com/show_bug.cgi?id=2490802
- https://issues.chromium.org/issues/503993985
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56211.json