Log in / Sign up

Vulnerability details

CVE-2026-56211

Red Hat AI Inference ServerRed Hat Enterprise Linux 10Red Hat Enterprise Linux 9Red Hat OpenShift AI

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

CVSS 3.1
7.1High

Official description

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.

CVSS scores

ScoreVersionSourceVector
7.1High 3.1 CVEProject cvelistV5 (CNA) (redhat) CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H
7.1High 3.1 CVEProject cvelistV5 (CNA) (redhat-SADP) CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H

Affected products

VendorProductVersionsSource
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat AI Inference Server All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 9 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)
Red Hat Red Hat OpenShift AI (RHOAI) All CVEProject cvelistV5 (CNA)

References and advisories

53
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-06-19
Last updated
2026-11-05
State
Published
Assigner (CNA)
redhat

Exploit prediction (EPSS)

0.87%
Probability of exploitation in 30 days
59.1%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-787
    Out-of-bounds Write