IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.6Alta

CVE-2026-56208Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux … Publicada: (hace 4 meses)

Descripción

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.

Debilidad (CWE): CWE-122

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
ai inference server 3.2 —
ai inference server 3.3 —
enterprise linux 8 —
enterprise linux 9 —
enterprise linux ai 3.3 —
enterprise linux ai 3.4 —
enterprise linux ai 3.5 —
openshift ai 3.3 —
openshift ai 3.4 —
openshift ai 3.5 —
Red Hat Red Hat AI Inference Server all versions
Red Hat Red Hat AI Inference Server 3.2 all versions
Red Hat Red Hat AI Inference Server 3.3 all versions
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support all versions
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support all versions
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On all versions
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support all versions
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On all versions
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service all versions
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux AI 3.3 all versions
Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 all versions
Red Hat Red Hat Enterprise Linux AI 3.4 for RHEL 9 all versions
Red Hat Red Hat Enterprise Linux AI 3.5 for RHEL 9 all versions
Red Hat Red Hat Hardened Images all versions
Red Hat Red Hat OpenShift AI 3.3 all versions
Red Hat Red Hat OpenShift AI 3.4 all versions
Red Hat Red Hat OpenShift AI 3.5 all versions
rhel aus 8.4 —
rhel aus 8.6 —
rhel e4s 8.8 —
rhel e4s 9.2 —
rhel e4s 9.4 —
rhel eus 9.6 —
rhel eus long life 8.4 —
rhel eus long life 8.6 —
rhel tus 8.8 —

Referencias y parches

CVE recientes del mismo producto — Red Hat Enterprise Linux

6.5Media
CVE-2026-121885

Podman: untrusted image labels allow auto-update to restart arbitrary systemd units

podman; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in Podman. An attacker can trigger a Denial of Service (DoS) by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart.…