An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel values. The encoder then writes approximately 1,200 bytes at the attacker-controlled address. This is fully deterministic and does not require a separate information leak. An attacker who can supply frames to a network-facing libaom encoder with SVC enabled could exploit this for denial of service or potential code execution.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| ai inference server | 3.2 | — | |
| ai inference server | 3.3 | — | |
| enterprise linux ai | 3.3 | — | |
| enterprise linux ai | 3.4 | — | |
| enterprise linux ai | 3.5 | — | |
| openshift ai | 3.3 | — | |
| openshift ai | 3.4 | — | |
| openshift ai | 3.5 | — | |
| Red Hat | Red Hat AI Inference Server | all versions | |
| Red Hat | Red Hat AI Inference Server 3.2 | all versions | |
| Red Hat | Red Hat AI Inference Server 3.3 | all versions | |
| Red Hat | Red Hat Enterprise Linux 10 | all versions | |
| Red Hat | Red Hat Enterprise Linux 9 | all versions | |
| Red Hat | Red Hat Enterprise Linux AI 3.3 | all versions | |
| Red Hat | Red Hat Enterprise Linux AI 3.3 for RHEL 9 | all versions | |
| Red Hat | Red Hat Enterprise Linux AI 3.4 for RHEL 9 | all versions | |
| Red Hat | Red Hat Enterprise Linux AI 3.5 for RHEL 9 | all versions | |
| Red Hat | Red Hat Hardened Images | all versions | |
| Red Hat | Red Hat OpenShift AI 3.3 | all versions | |
| Red Hat | Red Hat OpenShift AI 3.4 | all versions | |
| Red Hat | Red Hat OpenShift AI 3.5 | all versions | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — |
Ücretsiz ve açık kaynak honeypot sensörümüz, sunucunuzun kullanmadığı portlarda bekler; bağlanan tarayıcıları ve saldırganları ortak kara listeye bildirir.
