Medium WID-SEC-2026-2693 4 CVEs

Red Hat Enterprise Linux AI (libaom): Mehrere Schwachstellen

Published Aug 6, 2026 · Updated Nov 3, 2026 · Revision 12 · de-DE

Vendor: Debian Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: openSUSE Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux AI ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 4

High 7.6

CVE-2026-56208

Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu

Jun 19, 2026
High 7.1

CVE-2026-56209

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Hardened Images Linux Debian Ubuntu

Jun 19, 2026
High 7.1

CVE-2026-56210

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of lay…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Hardened Images Linux Debian Ubuntu

Jun 19, 2026
High 7.1

CVE-2026-56211

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that ov…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Hardened Images Linux Debian Ubuntu

Jun 19, 2026

Revision history

2026-11-03 #12
Neue Updates von openSUSE aufgenommen
2026-10-05 #11
Neue Updates von Red Hat aufgenommen
2026-10-01 #10
Neue Updates von Red Hat aufgenommen
2026-09-23 #9
Neue Updates von Red Hat aufgenommen
2026-09-22 #8
Neue Updates von Red Hat aufgenommen
2026-09-21 #7
Neue Updates von Red Hat aufgenommen
2026-09-17 #6
Neue Updates von Red Hat aufgenommen
2026-09-16 #5
Neue Updates von Ubuntu aufgenommen
2026-09-06 #4
Neue Updates von Debian aufgenommen
2026-08-31 #3
Neue Updates von Red Hat aufgenommen
2026-08-11 #2
Neue Updates von Red Hat aufgenommen
2026-08-06 #1
Initiale Fassung

References

Red Hat Security Advisory RHSA-2026:51100 vom 2026-08-06
https://access.redhat.com/errata/RHSA-2026:51100
Red Hat Security Advisory RHSA-2026:51146 vom 2026-08-06
https://access.redhat.com/errata/RHSA-2026:51146
Red Hat Security Advisory RHSA-2026:54181 vom 2026-08-12
https://access.redhat.com/errata/RHSA-2026:54181
Red Hat Security Advisory RHSA-2026:61627 vom 2026-08-31
https://access.redhat.com/errata/RHSA-2026:61627
Red Hat Security Advisory RHSA-2026:61628 vom 2026-08-31
https://access.redhat.com/errata/RHSA-2026:61628
Red Hat Security Advisory RHSA-2026:61629 vom 2026-08-31
https://access.redhat.com/errata/RHSA-2026:61629
Debian Security Advisory DLA-4774 vom 2026-09-06
https://lists.debian.org/debian-lts-announce/2026/09/msg00009.html
Ubuntu Security Notice USN-8772-1 vom 2026-09-16
https://ubuntu.com/security/notices/USN-8772-1
Red Hat Security Advisory RHSA-2026:68698 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68698
Red Hat Security Advisory RHSA-2026:68697 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68697
Red Hat Security Advisory RHSA-2026:68708 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68708
Red Hat Security Advisory RHSA-2026:68709 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68709
Red Hat Security Advisory RHSA-2026:68639 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68639
Red Hat Security Advisory RHSA-2026:68638 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68638
Red Hat Security Advisory RHSA-2026:68637 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68637
Red Hat Security Advisory RHSA-2026:68634 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68634
Red Hat Security Advisory RHSA-2026:68696 vom 2026-09-18
https://access.redhat.com/errata/RHSA-2026:68696
Red Hat Security Advisory RHSA-2026:68710 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68710
Red Hat Security Advisory RHSA-2026:68699 vom 2026-09-17
https://access.redhat.com/errata/RHSA-2026:68699
Red Hat Security Advisory RHSA-2026:69935 vom 2026-09-22
https://access.redhat.com/errata/RHSA-2026:69935
Red Hat Security Advisory RHSA-2026:69933 vom 2026-09-22
https://access.redhat.com/errata/RHSA-2026:69933
Red Hat Security Advisory RHSA-2026:69934 vom 2026-09-22
https://access.redhat.com/errata/RHSA-2026:69934
Red Hat Security Advisory RHSA-2026:69927 vom 2026-09-22
https://access.redhat.com/errata/RHSA-2026:69927
Red Hat Security Advisory RHSA-2026:69932 vom 2026-09-22
https://access.redhat.com/errata/RHSA-2026:69932
Red Hat Security Advisory RHSA-2026:69931 vom 2026-09-22
https://access.redhat.com/errata/RHSA-2026:69931
Red Hat Security Advisory RHSA-2026:69930 vom 2026-09-22
https://access.redhat.com/errata/RHSA-2026:69930
Red Hat Security Advisory RHSA-2026:69929 vom 2026-09-22
https://access.redhat.com/errata/RHSA-2026:69929
Red Hat Security Advisory RHSA-2026:71398 vom 2026-09-24
https://access.redhat.com/errata/RHSA-2026:71398
Red Hat Security Advisory RHSA-2026:71399 vom 2026-09-24
https://access.redhat.com/errata/RHSA-2026:71399
Red Hat Security Advisory RHSA-2026:71397 vom 2026-09-24
https://access.redhat.com/errata/RHSA-2026:71397
Red Hat Security Advisory RHSA-2026:71395 vom 2026-09-24
https://access.redhat.com/errata/RHSA-2026:71395
Red Hat Security Advisory RHSA-2026:71401 vom 2026-09-24
https://access.redhat.com/errata/RHSA-2026:71401
Red Hat Security Advisory RHSA-2026:71392 vom 2026-09-24
https://access.redhat.com/errata/RHSA-2026:71392
Red Hat Security Advisory RHSA-2026:71396 vom 2026-09-24
https://access.redhat.com/errata/RHSA-2026:71396
Red Hat Security Advisory RHSA-2026:74771 vom 2026-10-02
https://access.redhat.com/errata/RHSA-2026:74771
Red Hat Security Advisory RHSA-2026:76041 vom 2026-10-05
https://access.redhat.com/errata/RHSA-2026:76041
Red Hat Security Advisory RHSA-2026:76042 vom 2026-10-05
https://access.redhat.com/errata/RHSA-2026:76042
openSUSE Security Update OPENSUSE-SU-2026:12197-1 vom 2026-11-03
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BWADE5WNLKIJBLJFNEC4FHEOVCXMKXIS/