Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - aom

Fixed packages 7

Vulnerabilities 4

• High 7.6
  CVE-2026-56208

  Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

  A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu
  Jun 19, 2026
• High 7.1
  CVE-2026-56209

  Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

  An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Hardened Images Linux Debian Ubuntu
  Jun 19, 2026
• High 7.1
  CVE-2026-56210

  Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

  A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of lay…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Hardened Images Linux Debian Ubuntu
  Jun 19, 2026
• High 7.1
  CVE-2026-56211

  Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

  A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that ov…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Hardened Images Linux Debian Ubuntu
  Jun 19, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://issues.redhat.com/browse/AIPCC-29003
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51146.json
• report
  https://access.redhat.com/security/cve/CVE-2026-56208
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2490799
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-56208
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-56208
• article
  https://aomedia.googlesource.com/aom/+/243f8ae84b
• article
  https://issues.chromium.org/issues/504317456
• report
  https://access.redhat.com/security/cve/CVE-2026-56209
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2490800
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-56209
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-56209
• article
  https://aomedia.googlesource.com/aom/+/a93ba0ffaa
• article
  https://issues.chromium.org/issues/503993984
• report
  https://access.redhat.com/security/cve/CVE-2026-56210
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2490801
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-56210
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-56210
• article
  https://issues.chromium.org/issues/503975732
• report
  https://access.redhat.com/security/cve/CVE-2026-56211
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2490802
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-56211
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-56211
• article
  https://issues.chromium.org/issues/503993985