VDB
RHSA-2026:51146
RHSA-2026:51146
PUBLISHED
CVSS 7.099999904632568 HIGH
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | libaom-devel-docs-0:3.14.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.x86 |
| Red Hat | aom-debuginfo-0:3.14.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.s390x |
| Red Hat | libaom-debuginfo-0:3.14.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.x86 |
| Red Hat | libaom-devel-0:3.14.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.aarch64 |
| Red Hat | aom-debugsource-0:3.14.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.x86 |
| Red Hat | aom-debugsource-0:3.14.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.s390x |
| Red Hat | aom-0:3.14.0-1.el9ai.src as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.src |
| Red Hat | libaom-devel-docs-0:3.14.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.s390x |
| Red Hat | libaom-devel-docs-0:3.14.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.aarch64 |
| Red Hat | libaom-0:3.14.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.aarch64 |
| Red Hat | aom-0:3.14.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.s390x |
| Red Hat | libaom-devel-docs-0:3.14.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.ppc64le |
| Red Hat | aom-debugsource-0:3.14.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.aarch64 |
| Red Hat | libaom-devel-0:3.14.0-1.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.s390x |
| Red Hat | libaom-devel-0:3.14.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.ppc64le |
| Red Hat | aom-debugsource-0:3.14.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.ppc64le |
| Red Hat | aom-debuginfo-0:3.14.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.x86 |
| Red Hat | libaom-debuginfo-0:3.14.0-1.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.ppc64le |
| Red Hat | aom-debuginfo-0:3.14.0-1.el9ai.aarch64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.aarch64 |
| Red Hat | libaom-0:3.14.0-1.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.4 for RHEL 9 | 3.14.0-1.el9ai.x86 |
…and 9 more
Timeline
- Aug 6, 2026 CVE Published
- Aug 12, 2026 CVE Updated
- Aug 12, 2026 Distribution Patch
- Aug 12, 2026 Distribution Patch
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:51146 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://issues.redhat.com/browse/AIPCC-29003 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51146.json advisory
- https://access.redhat.com/security/cve/CVE-2026-56208 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2490799 issue
- https://www.cve.org/CVERecord?id=CVE-2026-56208 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56208 advisory
- https://aomedia.googlesource.com/aom/+/243f8ae84b advisory
- https://issues.chromium.org/issues/504317456 advisory
- https://access.redhat.com/security/cve/CVE-2026-56209 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2490800 issue
- https://www.cve.org/CVERecord?id=CVE-2026-56209 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56209 advisory
- https://aomedia.googlesource.com/aom/+/a93ba0ffaa advisory
- https://issues.chromium.org/issues/503993984 advisory
- https://access.redhat.com/security/cve/CVE-2026-56210 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2490801 issue
- https://www.cve.org/CVERecord?id=CVE-2026-56210 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56210 advisory
…and 6 more