cve-2026-56208
HIGH CVSS 7.6 opencve
Description
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.
Timeline
- Published
- 2026-06-19 17:16 UTC
- Last Modified
- 2026-11-06
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
CVSS metrics
| Version | Base | Severity | Vector | Exploitability | Impact | Source |
|---|---|---|---|---|---|---|
| 3.1 | 7.6 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H |
mitre | ||
| 3.1 | 7.6 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H |
nvd | ||
| 3.1 | 7.6 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H |
opencve | ||
| 3.1 | 7.6 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H |
redhat |
References
No references available.
Linked Vulnerabilities
{
"advisories": [
{
"id": "DSA-6411-1",
"source": "dsa",
"title": "aom security update",
"url": "https://lists.debian.org/debian-security-announce/2026/msg00322.html"
},
{
"id": "DLA-4774-1",
"source": "dla",
"title": "aom security update",
"url": "https://lists.debian.org/debian-lts-announce/2026/09/msg00009.html"
},
{
"id": "USN-8772-1",
"source": "usn",
"title": "AOM vulnerabilities",
"url": "https://ubuntu.com/security/notices/USN-8772-1"
}
],
"cve": "CVE-2026-56208",
"enrichment": {
"affected": [
{
"configurations": [
{
"platform": null,
"status": "affected",
"versions": null
}
],
"product": "libaom",
"vendor": "aomedia"
},
{
"configurations": [
{
"platform": null,
"status": "affected",
"versions": null
}
],
"enrichment": {
"confidence": 100.0,
"confidence_source": "manual",
"scores": [
{
"score": 100.0,
"source": "manual"
}
]
},
"original": {
"product": "Red Hat Enterprise Linux 10",
"source": "cna",
"vendor": "Red Hat"
},
"product": "enterprise_linux",
"vendor": "redhat"
},
{
"configurations": [
{
"platform": null,
"status": "affected",
"versions": null
}
],
"enrichment": {
"confidence": 100.0,
"confidence_source": "manual",
"scores": [
{
"score": 100.0,
"source": "manual"
}
]
},
"original": {
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"source": "cna",
"vendor": "Red Hat"
},
"product": "enterprise_linux_ai",
"vendor": "redhat"
},
{
"configurations": [
{
"platform": null,
"status": "affected",
"versions": null
}
],
"enrichment": {
"confidence": 83.0,
"confidence_source": "matching",
"scores": [
{
"score": 83.0,
"source": "matching"
}
]
},
"original": {
"product": "Red Hat Hardened Images",
"source": "cna",
"vendor": "Red Hat"
},
"product": "hardened_images",
"vendor": "redhat"
}
],
"created": "2026-06-19T21:00:04.918702+00:00",
"updated": "2026-06-24T20:41:43.522995+00:00",
"vendors": [
"aomedia",
"aomedia$PRODUCT$libaom",
"redhat",
"redhat$PRODUCT$enterprise_linux",
"redhat$PRODUCT$enterprise_linux_ai",
"redhat$PRODUCT$hardened_images"
]
},
"epss": {
"score": 0.00623
},
"mitre": {
"cpes": [
"cpe:/a:redhat:ai_inference_server:3",
"cpe:/a:redhat:ai_inference_server:3.2::el9",
"cpe:/a:redhat:ai_inference_server:3.3::el9",
"cpe:/a:redhat:enterprise_linux:10",
"cpe:/a:redhat:enterprise_linux:8",
"cpe:/a:redhat:enterprise_linux:8::appstream",
"cpe:/a:redhat:enterprise_linux:9",
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux_ai:3.3::el9",
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9",
"cpe:/a:redhat:enterprise_linux_ai:3.5::el9",
"cpe:/a:redhat:hummingbird:1",
"cpe:/a:redhat:openshift_ai",
"cpe:/a:redhat:openshift_ai:3.3::el9",
"cpe:/a:redhat:openshift_ai:3.4::el9",
"cpe:/a:redhat:openshift_ai:3.5::el9",
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:9.2::appstream",
"cpe:/a:redhat:rhel_e4s:9.4::appstream",
"cpe:/a:redhat:rhel_eus:9.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/o:redhat:enterprise_linux_eus:10.0",
"cpe:/o:redhat:rhel_els:7"
],
"created": "2026-06-19T16:28:26.466000+00:00",
"description": "A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {
"score": 7.6,
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
"cvssV4_0": {}
},
"mitre_repo_path": "cves/2026/56xxx/CVE-2026-56208.json",
"references": [
"https://access.redhat.com/errata/RHSA-2026:30814",
"https://access.redhat.com/errata/RHSA-2026:42875",
"https://access.redhat.com/errata/RHSA-2026:47104",
"https://access.redhat.com/errata/RHSA-2026:47105",
"https://access.redhat.com/errata/RHSA-2026:51100",
"https://access.redhat.com/errata/RHSA-2026:51146",
"https://access.redhat.com/errata/RHSA-2026:54180",
"https://access.redhat.com/errata/RHSA-2026:54181",
"https://access.redhat.com/errata/RHSA-2026:54182",
"https://access.redhat.com/errata/RHSA-2026:54185",
"https://access.redhat.com/errata/RHSA-2026:54248",
"https://access.redhat.com/errata/RHSA-2026:54249",
"https://access.redhat.com/errata/RHSA-2026:54259",
"https://access.redhat.com/errata/RHSA-2026:54339",
"https://access.redhat.com/errata/RHSA-2026:60520",
"https://access.redhat.com/errata/RHSA-2026:61627",
"https://access.redhat.com/errata/RHSA-2026:61628",
"https://access.redhat.com/errata/RHSA-2026:61629",
"https://access.redhat.com/errata/RHSA-2026:68634",
"https://access.redhat.com/errata/RHSA-2026:68637",
"https://access.redhat.com/errata/RHSA-2026:68638",
"https://access.redhat.com/errata/RHSA-2026:68639",
"https://access.redhat.com/errata/RHSA-2026:68640",
"https://access.redhat.com/errata/RHSA-2026:68696",
"https://access.redhat.com/errata/RHSA-2026:68697",
"https://access.redhat.com/errata/RHSA-2026:68698",
"https://access.redhat.com/errata/RHSA-2026:68699",
"https://access.redhat.com/errata/RHSA-2026:68708",
"https://access.redhat.com/errata/RHSA-2026:68709",
"https://access.redhat.com/errata/RHSA-2026:68710",
"https://access.redhat.com/errata/RHSA-2026:69927",
"https://access.redhat.com/errata/RHSA-2026:69929",
"https://access.redhat.com/errata/RHSA-2026:69930",
"https://access.redhat.com/errata/RHSA-2026:69931",
"https://access.redhat.com/errata/RHSA-2026:69932",
"https://access.redhat.com/errata/RHSA-2026:69933",
"https://access.redhat.com/errata/RHSA-2026:69934",
"https://access.redhat.com/errata/RHSA-2026:69935",
"https://access.redhat.com/errata/RHSA-2026:71392",
"https://access.redhat.com/errata/RHSA-2026:71393",
"https://access.redhat.com/errata/RHSA-2026:71394",
"https://access.redhat.com/errata/RHSA-2026:71395",
"https://access.redhat.com/errata/RHSA-2026:71396",
"https://access.redhat.com/errata/RHSA-2026:71397",
"https://access.redhat.com/errata/RHSA-2026:71398",
"https://access.redhat.com/errata/RHSA-2026:71399",
"https://access.redhat.com/errata/RHSA-2026:71401",
"https://access.redhat.com/errata/RHSA-2026:74771",
"https://access.redhat.com/errata/RHSA-2026:75652",
"https://access.redhat.com/errata/RHSA-2026:75654",
"https://access.redhat.com/errata/RHSA-2026:75657",
"https://access.redhat.com/errata/RHSA-2026:75658",
"https://access.redhat.com/errata/RHSA-2026:75659",
"https://access.redhat.com/errata/RHSA-2026:75660",
"https://access.redhat.com/errata/RHSA-2026:76041",
"https://access.redhat.com/errata/RHSA-2026:76042",
"https://access.redhat.com/errata/RHSA-2026:76043",
"https://access.redhat.com/errata/RHSA-2026:84734",
"https://access.redhat.com/security/cve/CVE-2026-56208",
"https://aomedia.googlesource.com/aom/+/243f8ae84b",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490799",
"https://issues.chromium.org/issues/504317456"
],
"title": "Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode",
"updated": "2026-11-06T07:25:43.951000+00:00",
"vendors": [
"redhat",
"redhat$PRODUCT$ai_inference_server",
"redhat$PRODUCT$enterprise_linux",
"redhat$PRODUCT$enterprise_linux_ai",
"redhat$PRODUCT$enterprise_linux_eus",
"redhat$PRODUCT$hummingbird",
"redhat$PRODUCT$openshift_ai",
"redhat$PRODUCT$rhel_aus",
"redhat$PRODUCT$rhel_e4s",
"redhat$PRODUCT$rhel_els",
"redhat$PRODUCT$rhel_eus",
"redhat$PRODUCT$rhel_eus_long_life",
"redhat$PRODUCT$rhel_tus"
],
"weaknesses": [
"CWE-122"
]
},
"nvd": {
"cpes": [],
"created": "2026-06-19T17:16:30.297000+00:00",
"description": "A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {
"score": 7.6,
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
"cvssV4_0": {}
},
"nvd_repo_path": "2026/CVE-2026-56208.json",
"references": [
"https://access.redhat.com/errata/RHSA-2026:30814",
"https://access.redhat.com/errata/RHSA-2026:42875",
"https://access.redhat.com/errata/RHSA-2026:47104",
"https://access.redhat.com/errata/RHSA-2026:47105",
"https://access.redhat.com/errata/RHSA-2026:51100",
"https://access.redhat.com/errata/RHSA-2026:51146",
"https://access.redhat.com/errata/RHSA-2026:54180",
"https://access.redhat.com/errata/RHSA-2026:54181",
"https://access.redhat.com/errata/RHSA-2026:54182",
"https://access.redhat.com/errata/RHSA-2026:54185",
"https://access.redhat.com/errata/RHSA-2026:54248",
"https://access.redhat.com/errata/RHSA-2026:54249",
"https://access.redhat.com/errata/RHSA-2026:54259",
"https://access.redhat.com/errata/RHSA-2026:54339",
"https://access.redhat.com/errata/RHSA-2026:60520",
"https://access.redhat.com/errata/RHSA-2026:61627",
"https://access.redhat.com/errata/RHSA-2026:61628",
"https://access.redhat.com/errata/RHSA-2026:61629",
"https://access.redhat.com/errata/RHSA-2026:68634",
"https://access.redhat.com/errata/RHSA-2026:68637",
"https://access.redhat.com/errata/RHSA-2026:68638",
"https://access.redhat.com/errata/RHSA-2026:68639",
"https://access.redhat.com/errata/RHSA-2026:68640",
"https://access.redhat.com/errata/RHSA-2026:68696",
"https://access.redhat.com/errata/RHSA-2026:68697",
"https://access.redhat.com/errata/RHSA-2026:68698",
"https://access.redhat.com/errata/RHSA-2026:68699",
"https://access.redhat.com/errata/RHSA-2026:68708",
"https://access.redhat.com/errata/RHSA-2026:68709",
"https://access.redhat.com/errata/RHSA-2026:68710",
"https://access.redhat.com/errata/RHSA-2026:69927",
"https://access.redhat.com/errata/RHSA-2026:69929",
"https://access.redhat.com/errata/RHSA-2026:69930",
"https://access.redhat.com/errata/RHSA-2026:69931",
"https://access.redhat.com/errata/RHSA-2026:69932",
"https://access.redhat.com/errata/RHSA-2026:69933",
"https://access.redhat.com/errata/RHSA-2026:69934",
"https://access.redhat.com/errata/RHSA-2026:69935",
"https://access.redhat.com/errata/RHSA-2026:71392",
"https://access.redhat.com/errata/RHSA-2026:71393",
"https://access.redhat.com/errata/RHSA-2026:71394",
"https://access.redhat.com/errata/RHSA-2026:71395",
"https://access.redhat.com/errata/RHSA-2026:71396",
"https://access.redhat.com/errata/RHSA-2026:71397",
"https://access.redhat.com/errata/RHSA-2026:71398",
"https://access.redhat.com/errata/RHSA-2026:71399",
"https://access.redhat.com/errata/RHSA-2026:71401",
"https://access.redhat.com/errata/RHSA-2026:74771",
"https://access.redhat.com/errata/RHSA-2026:75652",
"https://access.redhat.com/errata/RHSA-2026:75654",
"https://access.redhat.com/errata/RHSA-2026:75657",
"https://access.redhat.com/errata/RHSA-2026:75658",
"https://access.redhat.com/errata/RHSA-2026:75659",
"https://access.redhat.com/errata/RHSA-2026:75660",
"https://access.redhat.com/errata/RHSA-2026:76041",
"https://access.redhat.com/errata/RHSA-2026:76042",
"https://access.redhat.com/errata/RHSA-2026:76043",
"https://access.redhat.com/errata/RHSA-2026:84734",
"https://access.redhat.com/security/cve/CVE-2026-56208",
"https://aomedia.googlesource.com/aom/+/243f8ae84b",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490799",
"https://issues.chromium.org/issues/504317456",
"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56208.json"
],
"title": null,
"updated": "2026-11-06T08:17:27.130000+00:00",
"vendors": [],
"weaknesses": [
"CWE-122"
]
},
"opencve": {
"changes": [
{
"created": "2026-06-19T18:15:00+00:00",
"data": [
{
"details": {
"new": "A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.",
"old": null
},
"type": "description"
},
{
"details": {
"new": "Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode",
"old": null
},
"type": "title"
},
{
"details": [
"redhat",
"redhat$PRODUCT$enterprise_linux",
"redhat$PRODUCT$enterprise_linux_ai",
"redhat$PRODUCT$hummingbird"
],
"type": "first_time"
},
{
"details": {
"added": [
"CWE-122"
],
"removed": []
},
"type": "weaknesses"
},
{
"details": {
"added": [
"cpe:/a:redhat:enterprise_linux_ai:3",
"cpe:/a:redhat:hummingbird:1",
"cpe:/o:redhat:enterprise_linux:10",
"cpe:/o:redhat:enterprise_linux:9"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"redhat",
"redhat$PRODUCT$enterprise_linux",
"redhat$PRODUCT$enterprise_linux_ai",
"redhat$PRODUCT$hummingbird"
],
"removed": []
},
"type": "vendors"
},
{
"details": {
"added": [
"https://access.redhat.com/security/cve/CVE-2026-56208",
"https://aomedia.googlesource.com/aom/+/243f8ae84b",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490799",
"https://issues.chromium.org/issues/504317456"
],
"removed": []
},
"type": "references"
},
{
"details": {
"added": {
"cvssV3_1": {
"score": 7.6,
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
}
},
"removed": {},
"updated": {}
},
"type": "metrics"
}
],
"id": "4c02ce27-d1a6-47fe-a437-3afad5c25378"
},
{
"created": "2026-06-20T00:15:00+00:00",
"data": [
{
"details": {
"added": [
"https://nvd.nist.gov/vuln/detail/CVE-2026-56208",
"https://www.cve.org/CVERecord?id=CVE-2026-56208"
],
"removed": []
},
"type": "references"
},
{
"details": {
"added": {},
"removed": {},
"updated": {
"threat_severity": {
"new": "Important",
"old": null
}
}
},
"type": "metrics"
}
],
"id": "b8c61a08-80f1-421f-9e41-8411256b5f1c"
},
{
"created": "2026-06-22T15:30:00+00:00",
"data": [
{
"details": {
"added": {
"ssvc": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "partial"
},
"version": "2.0.3"
}
},
"removed": {},
"updated": {}
},
"type": "metrics"
}
],
"id": "91de6305-f3bc-407e-bbe4-48134a1a0529"
},
{
"created": "2026-06-24T21:00:00+00:00",
"data": [
{
"details": [
"aomedia",
"aomedia$PRODUCT$libaom",
"redhat$PRODUCT$hardened_images"
],
"type": "first_time"
},
{
"details": {
"added": [
"aomedia",
"aomedia$PRODUCT$libaom",
"redhat$PRODUCT$hardened_images"
],
"removed": []
},
"type": "vendors"
}
],
"id": "f288d477-177c-46a7-b861-680cb952bbef"
},
{
"created": "2026-06-25T14:30:00+00:00",
"data": [
{
"details": {
"added": {},
"removed": {},
"updated": {
"ssvc": {
"new": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "total"
},
"version": "2.0.3"
},
"old": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "partial"
},
"version": "2.0.3"
}
}
}
},
"type": "metrics"
}
],
"id": "eddb3d35-7468-46c9-bc04-312abe3992a5"
},
{
"created": "2026-06-29T00:30:00+00:00",
"data": [
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:30814"
],
"removed": []
},
"type": "references"
}
],
"id": "738f5339-c84f-47a2-ab1c-f000291f927f"
},
{
"created": "2026-07-03T15:30:00+00:00",
"data": [
{
"details": [
"redhat$PRODUCT$ai_inference_server",
"redhat$PRODUCT$openshift_ai"
],
"type": "first_time"
},
{
"details": {
"added": [
"cpe:/a:redhat:ai_inference_server:3",
"cpe:/a:redhat:openshift_ai"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"redhat$PRODUCT$ai_inference_server",
"redhat$PRODUCT$openshift_ai"
],
"removed": []
},
"type": "vendors"
}
],
"id": "19e3e0c8-6794-4c3e-96f2-c24843100712"
},
{
"created": "2026-07-21T16:00:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/a:redhat:enterprise_linux_ai:3.5::el9"
],
"removed": [
"cpe:/a:redhat:enterprise_linux_ai:3"
]
},
"type": "cpes"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:42875"
],
"removed": []
},
"type": "references"
}
],
"id": "bbb8ee55-516d-409d-a2be-9e54bdd3eb65"
},
{
"created": "2026-07-22T07:30:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/o:redhat:enterprise_linux:7",
"cpe:/o:redhat:enterprise_linux:8"
],
"removed": []
},
"type": "cpes"
}
],
"id": "402c6abc-fc62-465d-98fb-13e354a86d75"
},
{
"created": "2026-07-28T22:45:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/a:redhat:enterprise_linux:8::appstream"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:47105"
],
"removed": []
},
"type": "references"
}
],
"id": "73291bca-69e0-4a21-934a-81ec109b4bf2"
},
{
"created": "2026-08-03T10:15:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:47104"
],
"removed": []
},
"type": "references"
}
],
"id": "d1a4eb0f-b4eb-45f1-a20c-a3c0ac7af730"
},
{
"created": "2026-08-06T22:15:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/a:redhat:enterprise_linux_ai:3.3::el9",
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:51100",
"https://access.redhat.com/errata/RHSA-2026:51146"
],
"removed": []
},
"type": "references"
}
],
"id": "51ba50f4-0530-4240-a71b-a3cbd79398a6"
},
{
"created": "2026-08-12T07:15:00+00:00",
"data": [
{
"details": [
"redhat$PRODUCT$rhel_aus",
"redhat$PRODUCT$rhel_eus_long_life"
],
"type": "first_time"
},
{
"details": {
"added": [
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"redhat$PRODUCT$rhel_aus",
"redhat$PRODUCT$rhel_eus_long_life"
],
"removed": []
},
"type": "vendors"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:54180"
],
"removed": []
},
"type": "references"
}
],
"id": "eb1247eb-4c27-40e7-91fd-0bccedf4bd6c"
},
{
"created": "2026-08-12T07:45:00+00:00",
"data": [
{
"details": [
"redhat$PRODUCT$rhel_e4s"
],
"type": "first_time"
},
{
"details": {
"added": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"redhat$PRODUCT$rhel_e4s"
],
"removed": []
},
"type": "vendors"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:54185"
],
"removed": []
},
"type": "references"
}
],
"id": "828e0bed-a72e-477a-853f-f7939377af24"
},
{
"created": "2026-08-12T09:45:00+00:00",
"data": [
{
"details": [
"redhat$PRODUCT$enterprise_linux_eus"
],
"type": "first_time"
},
{
"details": {
"added": [
"cpe:/a:redhat:rhel_e4s:9.4::appstream",
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"redhat$PRODUCT$enterprise_linux_eus"
],
"removed": []
},
"type": "vendors"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:54181",
"https://access.redhat.com/errata/RHSA-2026:54182"
],
"removed": []
},
"type": "references"
}
],
"id": "bbf40328-8ac3-4b80-b108-d176885df6fa"
},
{
"created": "2026-08-12T15:45:00+00:00",
"data": [
{
"details": [
"redhat$PRODUCT$rhel_els",
"redhat$PRODUCT$rhel_eus",
"redhat$PRODUCT$rhel_tus"
],
"type": "first_time"
},
{
"details": {
"added": [
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_eus:9.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/o:redhat:rhel_els:7"
],
"removed": [
"cpe:/o:redhat:enterprise_linux:7"
]
},
"type": "cpes"
},
{
"details": {
"added": [
"redhat$PRODUCT$rhel_els",
"redhat$PRODUCT$rhel_eus",
"redhat$PRODUCT$rhel_tus"
],
"removed": []
},
"type": "vendors"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:54248",
"https://access.redhat.com/errata/RHSA-2026:54249",
"https://access.redhat.com/errata/RHSA-2026:54259",
"https://access.redhat.com/errata/RHSA-2026:54339"
],
"removed": []
},
"type": "references"
}
],
"id": "3e594954-b90e-4b52-81c0-980d8a550ca2"
},
{
"created": "2026-08-27T16:45:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:60520"
],
"removed": []
},
"type": "references"
}
],
"id": "5efe032d-ae1f-46f1-9f53-410e633bbca1"
},
{
"created": "2026-08-31T14:00:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:61627",
"https://access.redhat.com/errata/RHSA-2026:61628"
],
"removed": []
},
"type": "references"
}
],
"id": "521c60d5-80ee-4f70-87f8-5c1f1857d747"
},
{
"created": "2026-08-31T14:45:00+00:00",
"data": [
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:61629"
],
"removed": []
},
"type": "references"
}
],
"id": "56b65eb7-3690-47dd-82af-61463026e519"
},
{
"created": "2026-09-21T10:45:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/a:redhat:ai_inference_server:3.3::el9",
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:68634",
"https://access.redhat.com/errata/RHSA-2026:68637",
"https://access.redhat.com/errata/RHSA-2026:68638",
"https://access.redhat.com/errata/RHSA-2026:68639",
"https://access.redhat.com/errata/RHSA-2026:68640",
"https://access.redhat.com/errata/RHSA-2026:68696",
"https://access.redhat.com/errata/RHSA-2026:68697",
"https://access.redhat.com/errata/RHSA-2026:68698",
"https://access.redhat.com/errata/RHSA-2026:68699",
"https://access.redhat.com/errata/RHSA-2026:68708",
"https://access.redhat.com/errata/RHSA-2026:68709",
"https://access.redhat.com/errata/RHSA-2026:68710"
],
"removed": []
},
"type": "references"
}
],
"id": "3e8079af-b3bd-4591-89a2-ba39dd560b74"
},
{
"created": "2026-09-22T12:30:00+00:00",
"data": [
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:69927",
"https://access.redhat.com/errata/RHSA-2026:69929",
"https://access.redhat.com/errata/RHSA-2026:69930",
"https://access.redhat.com/errata/RHSA-2026:69931",
"https://access.redhat.com/errata/RHSA-2026:69932",
"https://access.redhat.com/errata/RHSA-2026:69933",
"https://access.redhat.com/errata/RHSA-2026:69934",
"https://access.redhat.com/errata/RHSA-2026:69935"
],
"removed": []
},
"type": "references"
}
],
"id": "b9caa75c-786a-4277-a4fc-8a81a03931d6"
},
{
"created": "2026-09-24T08:30:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/a:redhat:openshift_ai:3.5::el9"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:71392",
"https://access.redhat.com/errata/RHSA-2026:71393",
"https://access.redhat.com/errata/RHSA-2026:71394",
"https://access.redhat.com/errata/RHSA-2026:71395",
"https://access.redhat.com/errata/RHSA-2026:71396",
"https://access.redhat.com/errata/RHSA-2026:71397",
"https://access.redhat.com/errata/RHSA-2026:71398",
"https://access.redhat.com/errata/RHSA-2026:71399",
"https://access.redhat.com/errata/RHSA-2026:71401"
],
"removed": []
},
"type": "references"
}
],
"id": "c980af38-7795-4058-8480-171e252d53de"
},
{
"created": "2026-10-02T02:15:00+00:00",
"data": [
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:74771"
],
"removed": []
},
"type": "references"
}
],
"id": "7019dece-de6c-4895-9cc1-9155f9251b96"
},
{
"created": "2026-10-05T10:45:00+00:00",
"data": [
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:75652",
"https://access.redhat.com/errata/RHSA-2026:75654",
"https://access.redhat.com/errata/RHSA-2026:75657",
"https://access.redhat.com/errata/RHSA-2026:75658",
"https://access.redhat.com/errata/RHSA-2026:75659",
"https://access.redhat.com/errata/RHSA-2026:75660"
],
"removed": []
},
"type": "references"
}
],
"id": "98bb19de-8dcd-4c91-b9b5-680d56ab7d15"
},
{
"created": "2026-10-06T02:45:00+00:00",
"data": [
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:76041",
"https://access.redhat.com/errata/RHSA-2026:76042",
"https://access.redhat.com/errata/RHSA-2026:76043"
],
"removed": []
},
"type": "references"
}
],
"id": "6b353c47-241b-4b0c-8a76-0d79de29b1db"
},
{
"created": "2026-10-19T11:30:00+00:00",
"data": [
{
"details": {
"added": [
"https://access.redhat.com/errata/RHSA-2026:84734"
],
"removed": []
},
"type": "references"
}
],
"id": "79c59b24-5324-4e44-83d0-3e635bb2c86a"
},
{
"created": "2026-11-04T23:00:00+00:00",
"data": [
{
"details": {
"added": [
"cpe:/a:redhat:enterprise_linux:10",
"cpe:/a:redhat:enterprise_linux:8",
"cpe:/a:redhat:enterprise_linux:9"
],
"removed": [
"cpe:/o:redhat:enterprise_linux:10",
"cpe:/o:redhat:enterprise_linux:8",
"cpe:/o:redhat:enterprise_linux:9"
]
},
"type": "cpes"
}
],
"id": "e5e78ef4-bfdb-4076-817c-6fd41f844fec"
}
],
"cpes": {
"data": [
"cpe:/a:redhat:ai_inference_server:3",
"cpe:/a:redhat:ai_inference_server:3.2::el9",
"cpe:/a:redhat:ai_inference_server:3.3::el9",
"cpe:/a:redhat:enterprise_linux:10",
"cpe:/a:redhat:enterprise_linux:8",
"cpe:/a:redhat:enterprise_linux:8::appstream",
"cpe:/a:redhat:enterprise_linux:9",
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/a:redhat:enterprise_linux_ai:3.3::el9",
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9",
"cpe:/a:redhat:enterprise_linux_ai:3.5::el9",
"cpe:/a:redhat:hummingbird:1",
"cpe:/a:redhat:openshift_ai",
"cpe:/a:redhat:openshift_ai:3.3::el9",
"cpe:/a:redhat:openshift_ai:3.4::el9",
"cpe:/a:redhat:openshift_ai:3.5::el9",
"cpe:/a:redhat:rhel_aus:8.4::appstream",
"cpe:/a:redhat:rhel_aus:8.6::appstream",
"cpe:/a:redhat:rhel_e4s:8.8::appstream",
"cpe:/a:redhat:rhel_e4s:9.2::appstream",
"cpe:/a:redhat:rhel_e4s:9.4::appstream",
"cpe:/a:redhat:rhel_eus:9.6::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
"cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
"cpe:/a:redhat:rhel_tus:8.8::appstream",
"cpe:/o:redhat:enterprise_linux_eus:10.0",
"cpe:/o:redhat:rhel_els:7"
],
"providers": [
"mitre"
]
},
"created": {
"data": "2026-06-19T00:00:00+00:00",
"provider": "redhat"
},
"description": {
"data": "A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.",
"provider": "mitre"
},
"metrics": {
"cvssV2_0": {
"data": {},
"provider": null
},
"cvssV3_0": {
"data": {},
"provider": null
},
"cvssV3_1": {
"data": {
"score": 7.6,
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
"provider": "mitre"
},
"cvssV4_0": {
"data": {},
"provider": null
},
"epss": {
"data": {
"score": 0.00623
},
"provider": "first"
},
"kev": {
"data": {},
"provider": null
},
"ssvc": {
"data": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "total"
},
"version": "2.0.3"
},
"provider": "vulnrichment"
},
"threat_severity": {
"data": "Important",
"provider": "redhat"
}
},
"references": {
"data": [
"https://access.redhat.com/errata/RHSA-2026:30814",
"https://access.redhat.com/errata/RHSA-2026:42875",
"https://access.redhat.com/errata/RHSA-2026:47104",
"https://access.redhat.com/errata/RHSA-2026:47105",
"https://access.redhat.com/errata/RHSA-2026:51100",
"https://access.redhat.com/errata/RHSA-2026:51146",
"https://access.redhat.com/errata/RHSA-2026:54180",
"https://access.redhat.com/errata/RHSA-2026:54181",
"https://access.redhat.com/errata/RHSA-2026:54182",
"https://access.redhat.com/errata/RHSA-2026:54185",
"https://access.redhat.com/errata/RHSA-2026:54248",
"https://access.redhat.com/errata/RHSA-2026:54249",
"https://access.redhat.com/errata/RHSA-2026:54259",
"https://access.redhat.com/errata/RHSA-2026:54339",
"https://access.redhat.com/errata/RHSA-2026:60520",
"https://access.redhat.com/errata/RHSA-2026:61627",
"https://access.redhat.com/errata/RHSA-2026:61628",
"https://access.redhat.com/errata/RHSA-2026:61629",
"https://access.redhat.com/errata/RHSA-2026:68634",
"https://access.redhat.com/errata/RHSA-2026:68637",
"https://access.redhat.com/errata/RHSA-2026:68638",
"https://access.redhat.com/errata/RHSA-2026:68639",
"https://access.redhat.com/errata/RHSA-2026:68640",
"https://access.redhat.com/errata/RHSA-2026:68696",
"https://access.redhat.com/errata/RHSA-2026:68697",
"https://access.redhat.com/errata/RHSA-2026:68698",
"https://access.redhat.com/errata/RHSA-2026:68699",
"https://access.redhat.com/errata/RHSA-2026:68708",
"https://access.redhat.com/errata/RHSA-2026:68709",
"https://access.redhat.com/errata/RHSA-2026:68710",
"https://access.redhat.com/errata/RHSA-2026:69927",
"https://access.redhat.com/errata/RHSA-2026:69929",
"https://access.redhat.com/errata/RHSA-2026:69930",
"https://access.redhat.com/errata/RHSA-2026:69931",
"https://access.redhat.com/errata/RHSA-2026:69932",
"https://access.redhat.com/errata/RHSA-2026:69933",
"https://access.redhat.com/errata/RHSA-2026:69934",
"https://access.redhat.com/errata/RHSA-2026:69935",
"https://access.redhat.com/errata/RHSA-2026:71392",
"https://access.redhat.com/errata/RHSA-2026:71393",
"https://access.redhat.com/errata/RHSA-2026:71394",
"https://access.redhat.com/errata/RHSA-2026:71395",
"https://access.redhat.com/errata/RHSA-2026:71396",
"https://access.redhat.com/errata/RHSA-2026:71397",
"https://access.redhat.com/errata/RHSA-2026:71398",
"https://access.redhat.com/errata/RHSA-2026:71399",
"https://access.redhat.com/errata/RHSA-2026:71401",
"https://access.redhat.com/errata/RHSA-2026:74771",
"https://access.redhat.com/errata/RHSA-2026:75652",
"https://access.redhat.com/errata/RHSA-2026:75654",
"https://access.redhat.com/errata/RHSA-2026:75657",
"https://access.redhat.com/errata/RHSA-2026:75658",
"https://access.redhat.com/errata/RHSA-2026:75659",
"https://access.redhat.com/errata/RHSA-2026:75660",
"https://access.redhat.com/errata/RHSA-2026:76041",
"https://access.redhat.com/errata/RHSA-2026:76042",
"https://access.redhat.com/errata/RHSA-2026:76043",
"https://access.redhat.com/errata/RHSA-2026:84734",
"https://access.redhat.com/security/cve/CVE-2026-56208",
"https://aomedia.googlesource.com/aom/+/243f8ae84b",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490799",
"https://issues.chromium.org/issues/504317456",
"https://nvd.nist.gov/vuln/detail/CVE-2026-56208",
"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56208.json",
"https://www.cve.org/CVERecord?id=CVE-2026-56208"
],
"providers": [
"mitre",
"nvd",
"redhat"
]
},
"title": {
"data": "Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode",
"provider": "mitre"
},
"updated": {
"data": "2026-11-04T22:51:38.848000+00:00",
"provider": "mitre"
},
"vendors": {
"data": [
"aomedia",
"aomedia$PRODUCT$libaom",
"redhat",
"redhat$PRODUCT$ai_inference_server",
"redhat$PRODUCT$enterprise_linux",
"redhat$PRODUCT$enterprise_linux_ai",
"redhat$PRODUCT$enterprise_linux_eus",
"redhat$PRODUCT$hardened_images",
"redhat$PRODUCT$hummingbird",
"redhat$PRODUCT$openshift_ai",
"redhat$PRODUCT$rhel_aus",
"redhat$PRODUCT$rhel_e4s",
"redhat$PRODUCT$rhel_els",
"redhat$PRODUCT$rhel_eus",
"redhat$PRODUCT$rhel_eus_long_life",
"redhat$PRODUCT$rhel_tus"
],
"providers": [
"mitre",
"enrichment"
]
},
"weaknesses": {
"data": [
"CWE-122"
],
"providers": [
"mitre",
"nvd",
"redhat"
]
}
},
"redhat": {
"cpes": [],
"created": "2026-06-19T00:00:00+00:00",
"description": "A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {
"score": 7.6,
"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"
},
"threat_severity": "Important"
},
"redhat_repo_path": "2026/CVE-2026-56208.json",
"references": [
"https://aomedia.googlesource.com/aom/+/243f8ae84b",
"https://issues.chromium.org/issues/504317456",
"https://nvd.nist.gov/vuln/detail/CVE-2026-56208",
"https://www.cve.org/CVERecord?id=CVE-2026-56208"
],
"title": "libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode",
"updated": "2026-06-19T00:00:00+00:00",
"vendors": [],
"weaknesses": [
"CWE-122"
]
},
"vulnrichment": {
"cpes": [],
"created": "2026-06-19T16:28:26.466000+00:00",
"description": "A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {},
"cvssV4_0": {},
"kev": {},
"ssvc": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "total"
},
"version": "2.0.3"
}
},
"references": [],
"title": "Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode",
"updated": "2026-06-22T14:19:29.929000+00:00",
"vendors": [],
"vulnrichment_repo_path": "2026/56xxx/CVE-2026-56208.json",
"weaknesses": []
}
}