{"id":"CVE-2026-56208","aliases":["ALSA-2026:47104","ALSA-2026:47105","DEBIAN-CVE-2026-56208","EUVD-2026-38045","GHSA-mgv2-4j37-m3x6","MGASA-2026-0410","RHSA-2026:30814","RHSA-2026:42875","RHSA-2026:47104","RHSA-2026:47105","RHSA-2026:51100","RHSA-2026:51146","RHSA-2026:54180","RHSA-2026:54181","RHSA-2026:54182","RHSA-2026:54185","RHSA-2026:54248","RHSA-2026:54249","RHSA-2026:54259","RHSA-2026:54339","RLSA-2026:47104","RLSA-2026:47105","ROOT-OS-DEBIAN-11-CVE-2026-56208","ROOT-OS-DEBIAN-12-CVE-2026-56208","ROOT-OS-DEBIAN-13-CVE-2026-56208","SUSE-SU-2026:22369-1","SUSE-SU-2026:2829-1","SUSE-SU-2026:3224-1","UBUNTU-CVE-2026-56208","USN-8772-1","openSUSE-SU-2026:12197-1","openSUSE-SU-2026:21061-1"],"status":"published","title":"Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode","description":"A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00454,"percentile":0.39911,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2026-06-19T16:28:26Z","modified":"2026-11-06T07:25:43Z","fixes":[{"ecosystem":"Debian:12","package":"aom","fixed_in":["3.6.0-1+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"aom","fixed_in":["3.12.1-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"aom","fixed_in":["3.14.1-1"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"aom","fixed_in":["1.0.0.errata1-3+deb11u2.root.io.9","1.0.0.errata1-3+deb11u2.aikido.10","1.0.0.errata1-3+deb11u2.root.io.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-aom","fixed_in":["1.0.0.errata1-3+deb11u2.root.io.9","1.0.0.errata1-3+deb11u2.aikido.10","1.0.0.errata1-3+deb11u2.root.io.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"aom","fixed_in":["3.3.0-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"aom","fixed_in":["3.8.2-2ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"aom","fixed_in":["3.13.1-2ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.13.0-1.el9_8.alma.1"}]}],"bundled":33},{"source":"osv","ecosystem":"AlmaLinux:9","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.13.0-1.el9_8.alma.1"}]}],"bundled":33},{"source":"osv","ecosystem":"AlmaLinux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"140.13.0-1.el8_10.alma.1"}]}],"bundled":33},{"source":"osv","ecosystem":"Debian:12","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-1+deb12u3"}]}],"versions":["3.6.0-1","3.6.0-1+deb12u1","3.6.0-1+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12.1-1+deb13u1"}]}],"versions":["3.12.1-1"]},{"source":"osv","ecosystem":"Debian:14","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14.1-1"}]}],"versions":["3.12.1-1","3.13.1-1","3.13.1-1~exp1","3.13.1-2"]},{"source":"osv","ecosystem":"Mageia:10","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.1-1.1.mga10"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-1.2.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libaom-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libaom-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-0.1.hum1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.5::el9","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.5::el9","package":"aom-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.5::el9","package":"aom-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.5::el9","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.5::el9","package":"libaom-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.5::el9","package":"libaom-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.5::el9","package":"libaom-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_10"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_10"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_10"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.3::el9","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.3::el9","package":"aom-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.3::el9","package":"aom-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.3::el9","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.3::el9","package":"libaom-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.3::el9","package":"libaom-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.3::el9","package":"libaom-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.4::el9","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.4::el9","package":"aom-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.4::el9","package":"aom-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.4::el9","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.4::el9","package":"libaom-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.4::el9","package":"libaom-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_ai:3.4::el9","package":"libaom-devel-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0-1.el9ai"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el10_0"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el10_0"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el10_0"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_4"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_2"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_2"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_2"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_2"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el7_9"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el7_9"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"firefox-x11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_6"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Rocky Linux:9","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el9_8"}]}],"bundled":33},{"source":"osv","ecosystem":"Rocky Linux:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:140.13.0-1.el8_10"}]}],"bundled":33},{"source":"osv","ecosystem":"Root:Debian:11","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0.errata1-3+deb11u2.root.io.9"},{"fixed":"1.0.0.errata1-3+deb11u2.aikido.10"},{"fixed":"1.0.0.errata1-3+deb11u2.root.io.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0.errata1-3+deb11u2.root.io.9"},{"fixed":"1.0.0.errata1-3+deb11u2.aikido.10"},{"fixed":"1.0.0.errata1-3+deb11u2.root.io.8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-160000.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-160000.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150400.3.12.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"SVT-AV1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150600.3.2.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150600.3.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libyuv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230517+a377993-150600.3.4.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"SVT-AV1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150600.3.2.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150600.3.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150600.3.9.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"libyuv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230517+a377993-150600.3.4.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"SVT-AV1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150600.3.2.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150600.3.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150600.3.9.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"libyuv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230517+a377993-150600.3.4.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"SVT-AV1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-150600.3.2.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150600.3.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.1-150600.3.9.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"libyuv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20230517+a377993-150600.3.4.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.1+esm1"}]}],"versions":["1.0.0.errata1-3build1","3.2.0-2","3.3.0-1","3.3.0-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-2ubuntu0.2"}]}],"versions":["3.6.1-1","3.7.0-1","3.7.1-1","3.8.1-1","3.8.2-2build1","3.8.2-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.12.0-1","3.12.1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.1-2ubuntu0.1"}]}],"versions":["3.12.1-1","3.13.1-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.0-1ubuntu0.1+esm1"}]}],"versions":["1.0.0.errata1-3build1","3.2.0-2","3.3.0-1","3.3.0-1ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.2-2ubuntu0.2"}]}],"versions":["3.6.1-1","3.7.0-1","3.7.1-1","3.8.1-1","3.8.2-2build1","3.8.2-2ubuntu0.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"aom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.1-2ubuntu0.1"}]}],"versions":["3.12.1-1","3.13.1-2"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.15.2-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libaom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-160000.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"libaom-devel-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.11.0-160000.3.1"}]}],"bundled":4}],"products":[{"vendor":"red hat","product":"red hat ai inference server"},{"vendor":"red hat","product":"red hat ai inference server 3.2"},{"vendor":"red hat","product":"red hat ai inference server 3.3"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux ai 3.3"},{"vendor":"red hat","product":"red hat enterprise linux ai 3.3 for rhel 9"},{"vendor":"red hat","product":"red hat enterprise linux ai 3.4 for rhel 9"},{"vendor":"red hat","product":"red hat enterprise linux ai 3.5 for rhel 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift ai 3.3"},{"vendor":"red hat","product":"red hat openshift ai 3.4"},{"vendor":"red hat","product":"red hat openshift ai 3.5"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:30814","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:42875","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47104","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47105","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:51100","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:51146","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54180","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54181","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54182","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54185","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54248","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54249","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54259","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54339","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60520","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61627","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61628","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61629","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68634","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68637","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68638","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68639","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68640","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68696","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68697","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68698","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68699","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68708","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68709","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:68710","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69927","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69929","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69930","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69931","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69932","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69933","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69934","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69935","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71392","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71393","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71394","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71395","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71396","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71397","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71398","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71399","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:71401","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74771","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75652","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75654","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75657","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75658","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75659","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:75660","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76041","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76042","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76043","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:84734","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56208","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://aomedia.googlesource.com/aom/+/243f8ae84b","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490799","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://issues.chromium.org/issues/504317456","tags":["article","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56208.json","tags":["x_sadp-csaf-vex"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56208","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-mgv2-4j37-m3x6"},{"url":"https://access.redhat.com/security/cve/CVE-2026-15718","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15719","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16349","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16350","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16351","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16352","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16353","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16354","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16355","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16356","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16357","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16358","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16359","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16360","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16361","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16362","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16363","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16368","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16369","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16371","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16374","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16375","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16377","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16379","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16381","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16383","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16387","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16390","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16391","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16396","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16405","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16412","tags":["report"]},{"url":"https://bugzilla.redhat.com/2490799","tags":["report"]},{"url":"https://bugzilla.redhat.com/2499973","tags":["report"]},{"url":"https://bugzilla.redhat.com/2499974","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503415","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503416","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503420","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503423","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503425","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503430","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503432","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503434","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503439","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503440","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503444","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503451","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503454","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503456","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503463","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503472","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503473","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503485","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503489","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503491","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503497","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503498","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503500","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503501","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503505","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503512","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503513","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503517","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503521","tags":["report"]},{"url":"https://bugzilla.redhat.com/2503527","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-47104.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-47105.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-56208","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0410.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36170","tags":["report"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00322.html","tags":["web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56209","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56210","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-56211","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30814.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56208","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490800","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56209","tags":["advisory"]},{"url":"https://aomedia.googlesource.com/aom/+/a93ba0ffaa","tags":["article"]},{"url":"https://issues.chromium.org/issues/503993984","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490801","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56210","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56210","tags":["advisory"]},{"url":"https://issues.chromium.org/issues/503975732","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2490802","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-56211","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56211","tags":["advisory"]},{"url":"https://issues.chromium.org/issues/503993985","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://issues.redhat.com/browse/AIPCC-22882","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_42875.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503440","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503463","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503527","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47104.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15718","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15718","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-15718","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-15718","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15719","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15719","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-15719","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-15719","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16349","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16349","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16349","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16349","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16350","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16350","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16350","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16350","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16351","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16351","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16351","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16351","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16352","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16352","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16352","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16352","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16353","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16353","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16353","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16353","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16354","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16354","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16354","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16354","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16355","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16355","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16355","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16355","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16356","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16356","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16356","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16357","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16357","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16357","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16357","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16358","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16358","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16358","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16359","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16359","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16359","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16359","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16360","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16360","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16360","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16360","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16361","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16361","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16361","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16361","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16362","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16362","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16362","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16363","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16363","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16363","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16368","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16368","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16368","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16368","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16369","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16369","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16369","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16369","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16371","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16371","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16371","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16371","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-84/#CVE-2026-16371","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-87/#CVE-2026-16371","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16374","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16374","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16374","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16374","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16375","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16375","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16375","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16375","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16377","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16377","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16377","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16377","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16379","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16379","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16379","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16379","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16381","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16381","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16381","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16381","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16383","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16383","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16383","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16387","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16387","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16387","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16390","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16390","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16390","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16390","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16391","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16391","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16391","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16391","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16396","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16396","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16396","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16396","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16405","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16405","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16405","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16405","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16412","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16412","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-70/#CVE-2026-16412","tags":["article"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-72/#CVE-2026-16412","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47105.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/AIPCC-29004","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51100.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/AIPCC-29003","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51146.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54180.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54181.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54182.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54185.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54248.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54249.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54259.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54339.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:47104","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:47105","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622369-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268650","tags":["report"]},{"url":"https://bugzilla.suse.com/1268651","tags":["report"]},{"url":"https://bugzilla.suse.com/1268653","tags":["report"]},{"url":"https://bugzilla.suse.com/1268655","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-56211","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262829-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263224-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1263678","tags":["report"]},{"url":"https://bugzilla.suse.com/1268242","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56208","tags":["report"]},{"url":"https://aomedia.googlesource.com/aom/+/243f8ae84bfbc495b3a3c12948abc4dff3af2f84","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8772-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-56209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-56211","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-13906","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-56208","title":"Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode","description":"A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.","status":"published","published":"2026-06-19T16:28:26.466Z","modified":"2026-11-06T07:25:43.951Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-122","CWE-122"],"updated_at":"2026-11-06T08:57:32.08691Z"}],"euvd":[{"id":"EUVD-2026-38045","description":"A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.","status":"published","published":"2026-06-19T16:28:26Z","modified":"2026-11-06T07:25:43Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-06T08:04:05.441568Z"}],"ghsa":[{"id":"GHSA-mgv2-4j37-m3x6","title":"A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation....","description":"A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.","status":"published","published":"2026-06-19T18:32:34Z","modified":"2026-10-19T12:32:41Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:13:56.45986Z"}],"nvd":[{"id":"CVE-2026-56208","description":"A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.","status":"published","published":"2026-06-19T17:16:30.297Z","modified":"2026-11-06T08:17:27.13Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-06T11:59:56.337908Z"}],"osv":[{"id":"DEBIAN-CVE-2026-56208","description":"A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.","status":"published","published":"2026-06-19T17:16:30.297Z","modified":"2026-11-07T09:47:24.346304305Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"RHSA-2026:30814","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-06-29T11:29:38Z","modified":"2026-10-20T10:07:12Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.963895Z"},{"id":"RHSA-2026:42875","title":"Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - aom","status":"published","published":"2026-07-23T10:14:15Z","modified":"2026-10-20T10:09:08Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"RHSA-2026:47104","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-08-04T10:25:45Z","modified":"2026-10-20T10:09:49Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:47105","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-07-29T10:11:38Z","modified":"2026-10-20T10:09:50Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:51100","title":"Red Hat Security Advisory: RHEL AI 3.3 RPM runtime CVE fix - aom","status":"published","published":"2026-08-07T10:28:40Z","modified":"2026-10-20T10:10:34Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:51146","title":"Red Hat Security Advisory: RHEL AI 3.4 RPM runtime CVE fix - aom","status":"published","published":"2026-08-07T10:28:42Z","modified":"2026-10-20T10:10:36Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"RHSA-2026:54180","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-08-12T10:16:44Z","modified":"2026-10-20T10:10:57Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54181","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-08-12T10:16:45Z","modified":"2026-10-20T10:10:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54182","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-08-12T10:16:46Z","modified":"2026-10-20T10:10:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54185","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-08-12T10:16:47Z","modified":"2026-10-20T10:10:59Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54248","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-08-13T10:17:37Z","modified":"2026-10-20T10:11:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54249","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-08-13T10:17:38Z","modified":"2026-10-20T10:11:01Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54259","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-08-13T10:17:39Z","modified":"2026-10-20T10:11:02Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54339","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2026-08-13T10:17:42Z","modified":"2026-10-20T10:11:03Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RLSA-2026:47104","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)\n\n* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)\n\n* firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)\n\n* firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)\n\n* firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)\n\n* firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)\n\n* firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)\n\n* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)\n\n* firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)\n\n* firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)\n\n* firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)\n\n* firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)\n\n* firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)\n\n* firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)\n\n* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)\n\n* firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)\n\n* firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)\n\n* firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)\n\n* firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)\n\n* firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-03T12:03:50.556944Z","modified":"2026-08-03T12:30:05.519185251Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:47105","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)\n\n* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)\n\n* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)\n\n* firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)\n\n* firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)\n\n* firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)\n\n* firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)\n\n* firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)\n\n* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)\n\n* firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)\n\n* firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)\n\n* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)\n\n* firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)\n\n* firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)\n\n* firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)\n\n* firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)\n\n* firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)\n\n* firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)\n\n* firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)\n\n* firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)\n\n* firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)\n\n* firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)\n\n* firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)\n\n* firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)\n\n* firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)\n\n* firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-07-29T18:01:13.110756Z","modified":"2026-07-29T18:25:49.310735256Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-56208","description":"A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.","status":"published","published":"2026-06-19T17:16:00Z","modified":"2026-09-16T20:24:06.316024984Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:41.382716Z"},{"id":"ALSA-2026:47104","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)\n  * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)\n  * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)\n  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)\n  * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)\n  * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)\n  * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)\n  * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)\n  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)\n  * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)\n  * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)\n  * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)\n  * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)\n  * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)\n  * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)\n  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)\n  * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)\n  * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)\n  * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)\n  * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)\n  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)\n  * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)\n  * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)\n  * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)\n  * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-28T00:00:00Z","modified":"2026-10-29T11:32:24.085955121Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:47105","title":"Important: firefox security update","description":"Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.  \n\nSecurity Fix(es):  \n\n  * libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)\n  * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)\n  * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)\n  * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)\n  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)\n  * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)\n  * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)\n  * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)\n  * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)\n  * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16352)\n  * firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2026-16368)\n  * firefox: thunderbird: Mitigation bypass in the PDF Viewer component (CVE-2026-16377)\n  * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153 (CVE-2026-16360)\n  * firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component (CVE-2026-16362)\n  * firefox: thunderbird: Site isolation issue in the Graphics: WebRender component (CVE-2026-16358)\n  * firefox: thunderbird: Site isolation issue in the Networking component (CVE-2026-16387)\n  * firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component (CVE-2026-16349)\n  * firefox: thunderbird: Incorrect boundary conditions in the Graphics component (CVE-2026-16357)\n  * firefox: thunderbird: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-16351)\n  * firefox: thunderbird: Privilege escalation in the DOM: Navigation component (CVE-2026-16371)\n  * firefox: thunderbird: Privilege escalation in the DOM: Content Processes component (CVE-2026-16379)\n  * firefox: thunderbird: Information disclosure in the Graphics: ImageLib component (CVE-2026-16354)\n  * firefox: thunderbird: Information disclosure in the Framework component in DevTools (CVE-2026-16374)\n  * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component (CVE-2026-16359)\n  * firefox: thunderbird: Mitigation bypass in the DOM: Networking component (CVE-2026-16383)\n  * firefox: thunderbird: Integer overflow in the JavaScript: WebAssembly component (CVE-2026-16369)\n  * firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component (CVE-2026-16353)\n  * firefox: thunderbird: Privilege escalation in WebExtensions (CVE-2026-16396)\n  * firefox: thunderbird: Information disclosure in the Networking: WebSockets component (CVE-2026-16405)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-07-28T00:00:00Z","modified":"2026-10-29T11:02:24.759693867Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"MGASA-2026-0410","title":"Updated aom packages fix security vulnerabilities","description":"Heap buffer overflow in av1 encoder first-pass stats buffer via lap\nmode. (CVE-2026-56208)\nArbitrary address write via svc layer context oob and cyclic refresh map\npointer hijack. (CVE-2026-56209)\nHeap-buffer-overflow read via missing bounds check in ctrl_set_layer_id.\n(CVE-2026-56210)\nRemote code execution via svc layer context handling with\nattacker-controlled frames. (CVE-2026-56211)\n","status":"published","published":"2026-09-16T15:40:01Z","modified":"2026-09-16T15:45:03.445339115Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:12197-1","title":"aom-tools-3.15.2-1.1 on GA media","description":"These are all security issues fixed in the aom-tools-3.15.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-20T00:00:00Z","modified":"2026-10-21T17:23:13.447154016Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"openSUSE-SU-2026:21061-1","title":"Security update for libaom","description":"This update for libaom fixes the following issues\n\n- CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash\n  (bsc#1268650).\n- CVE-2026-56209: crafted video frames with specific Y-plane pixel values can lead to an arbitrary memory write\n  (bsc#1268651).\n- CVE-2026-56210: missing bounds check on layer_id inputs can lead to an out-of-bounds heap read (bsc#1268653).\n- CVE-2026-56211: out-of-range spatial/temporal layer selection can lead to remote code execution (bsc#1268655).\n","status":"published","published":"2026-06-25T19:32:50Z","modified":"2026-06-30T18:24:38.455901088Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2026-56208","title":"CVE-2026-56208 in aom - Patched by Root","description":"Root has patched CVE-2026-56208 in the aom package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-20T12:07:36Z","modified":"2026-08-20T13:30:12.969142624Z","updated_at":"2026-11-02T15:53:30.44348Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-56208","title":"CVE-2026-56208 in aom - Patched by Root","description":"Root has patched CVE-2026-56208 in the aom package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-25T08:28:46Z","modified":"2026-09-14T14:00:05.480058917Z","updated_at":"2026-11-02T15:53:32.298225Z"},{"id":"ROOT-OS-DEBIAN-13-CVE-2026-56208","title":"CVE-2026-56208 in aom - Patched by Root","description":"Root has patched CVE-2026-56208 in the aom package for Root:Debian:13. Multiple fixed versions available.","status":"withdrawn","published":"2026-08-23T14:17:04Z","modified":"2026-10-08T13:00:07.285749837Z","updated_at":"2026-11-02T15:53:33.681527Z"},{"id":"SUSE-SU-2026:22369-1","title":"Security update for libaom","description":"This update for libaom fixes the following issues\n\n- CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash\n  (bsc#1268650).\n- CVE-2026-56209: crafted video frames with specific Y-plane pixel values can lead to an arbitrary memory write\n  (bsc#1268651).\n- CVE-2026-56210: missing bounds check on layer_id inputs can lead to an out-of-bounds heap read (bsc#1268653).\n- CVE-2026-56211: out-of-range spatial/temporal layer selection can lead to remote code execution (bsc#1268655).\n","status":"published","published":"2026-06-25T19:33:13Z","modified":"2026-07-02T18:24:14.642125574Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:2829-1","title":"Security update for libaom","description":"This update for libaom fixes the following issues:\n \n- CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash (bsc#1268650).\n- CVE-2026-56209: crafted video frames with specific Y-plane pixel values can lead to an arbitrary memory write (bsc#1268651).\n- CVE-2026-56210: missing bounds check on layer_id inputs can lead to an out-of-bounds heap read (bsc#1268653).\n- CVE-2026-56211: out-of-range spatial/temporal layer selection can lead to remote code execution (bsc#1268655).\n","status":"published","published":"2026-07-09T18:40:20Z","modified":"2026-07-10T10:00:08.943519547Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3224-1","title":"Security update for SVT-AV1, libyuv0, libaom3","description":"This update for SVT-AV1, libyuv0, libaom3 fixes the following issues:\n\n- CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash\n  (bsc#1268650).\n- CVE-2026-56209: crafted video frames with specific Y-plane pixel values can lead to an arbitrary memory write\n  (bsc#1268651).\n- CVE-2026-56210: missing bounds check on layer_id inputs can lead to an out-of-bounds heap read (bsc#1268653).\n- CVE-2026-56211: out-of-range spatial/temporal layer selection can lead to remote code execution (bsc#1268655).\n\nBug fixes:\n\n- Add SVT-AV1, libyuv0, libaom3 to Basesystem, no source changes. (bsc#1263678).\n","status":"published","published":"2026-07-23T18:34:24Z","modified":"2026-07-24T17:16:07.632086048Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"USN-8772-1","title":"aom vulnerabilities","description":"It was discovered that AOM incorrectly handled the first-pass statistics\nbuffer in Look-Ahead Processing (LAP) mode. An attacker could possibly use\nthis issue to cause a heap buffer overflow, leading to a denial of service\nor possibly execute arbitrary code. (CVE-2026-56208)\n\nIt was discovered that AOM incorrectly validated spatial and temporal\nlayer IDs in the SVC (Scalable Video Coding) encoder controls. An attacker\ncould possibly use this issue to write to an arbitrary memory address, read\nout-of-bounds heap memory, or execute arbitrary code. (CVE-2026-56209,\nCVE-2026-56210, CVE-2026-56211)","status":"published","published":"2026-09-16T09:29:07Z","modified":"2026-09-16T20:27:34.125593287Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}