RHSA-2026:68697
Vulnerability from csaf_redhat - Published: 2026-09-17 15:47 - Updated: 2026-09-22 09:24Summary
Red Hat Security Advisory: Red Hat AI Inference Server 3.3.7 (Spyre)
Severity
Important
Notes
Topic: Red Hat AI Inference Server 3.3.7 (Spyre) is now available.
Details: Red Hat® AI Inference Server
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in SQLite's FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed against such a database, an attacker can cause process crashes, memory exhaustion, or achieve arbitrary code execution, potentially compromising the system.
7.8 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processing. Successful exploitation of this vulnerability can lead to a crash of the application or allow for arbitrary code execution.
7.8 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data (also known as data amplification), allows a remote attacker to cause a Denial of Service (DoS) by sending specially crafted, highly compressed data. The affected component fails to properly manage the expansion of this data, leading to resource exhaustion and system unavailability.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
A flaw was found in Apache Thrift's C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.
7.6 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel values. The encoder then writes approximately 1,200 bytes at the attacker-controlled address. This is fully deterministic and does not require a separate information leak. An attacker who can supply frames to a network-facing libaom encoder with SVC enabled could exploit this for denial of service or potential code execution.
7.1 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an out-of-bounds heap read of approximately 40,728 bytes when computing a layer context array index. An attacker who can influence SVC encoder parameters in a network-facing service could exploit this for information disclosure (heap content leak) or denial of service (segmentation fault from hitting unmapped memory).
7.1 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.
7.1 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
A flaw was found in FFmpeg's RASC video decoder. A remote attacker could exploit this by providing a crafted media stream using the RASC FourCC (Four Character Code), which is then decoded by libavcodec. This vulnerability triggers a bitstream-controlled out-of-bounds heap write and an adjacent out-of-bounds read, leading to memory corruption. This can result in a denial of service or potentially arbitrary code execution.
7.6 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in arbitrary code execution, information disclosure, or denial of service.
8.8 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before the entire body is received. This leaves trailing data to be processed incorrectly, potentially enabling an attacker to bypass security mechanisms or gain unauthorized access to resources.
7.0 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Moderate
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit this to trigger a Denial of Service (DoS) in the client application, making it unavailable.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-11822
Threats
Impact
Important
References
94 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat AI Inference Server 3.3.7 (Spyre) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat\u00ae AI Inference Server",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:68697",
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11822",
"url": "https://access.redhat.com/security/cve/CVE-2026-11822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11824",
"url": "https://access.redhat.com/security/cve/CVE-2026-11824"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48586",
"url": "https://access.redhat.com/security/cve/CVE-2026-48586"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55969",
"url": "https://access.redhat.com/security/cve/CVE-2026-55969"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56208",
"url": "https://access.redhat.com/security/cve/CVE-2026-56208"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56209",
"url": "https://access.redhat.com/security/cve/CVE-2026-56209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56210",
"url": "https://access.redhat.com/security/cve/CVE-2026-56210"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56211",
"url": "https://access.redhat.com/security/cve/CVE-2026-56211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58049",
"url": "https://access.redhat.com/security/cve/CVE-2026-58049"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-64835",
"url": "https://access.redhat.com/security/cve/CVE-2026-64835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69243",
"url": "https://access.redhat.com/security/cve/CVE-2026-69243"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69244",
"url": "https://access.redhat.com/security/cve/CVE-2026-69244"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/products/ai/inference-server",
"url": "https://www.redhat.com/en/products/ai/inference-server"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68697.json"
}
],
"title": "Red Hat Security Advisory: Red Hat AI Inference Server 3.3.7 (Spyre)",
"tracking": {
"current_release_date": "2026-09-22T09:24:35+00:00",
"generator": {
"date": "2026-09-22T09:24:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:68697",
"initial_release_date": "2026-09-17T15:47:06+00:00",
"revision_history": [
{
"date": "2026-09-17T15:47:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-17T15:47:09+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-22T09:24:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AI Inference Server 3.3",
"product": {
"name": "Red Hat AI Inference Server 3.3",
"product_id": "Red Hat AI Inference Server 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ai_inference_server:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat AI Inference Server"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"product": {
"name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"product_id": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vllm-spyre-rhel9@sha256%3A3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea?arch=amd64\u0026repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9\u0026tag=1789502493"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"product": {
"name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"product_id": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vllm-spyre-rhel9@sha256%3A4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc?arch=ppc64le\u0026repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9\u0026tag=1789502493"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x",
"product": {
"name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x",
"product_id": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vllm-spyre-rhel9@sha256%3Af8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88?arch=s390x\u0026repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9\u0026tag=1789502493"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64 as a component of Red Hat AI Inference Server 3.3",
"product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64"
},
"product_reference": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"relates_to_product_reference": "Red Hat AI Inference Server 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le as a component of Red Hat AI Inference Server 3.3",
"product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le"
},
"product_reference": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"relates_to_product_reference": "Red Hat AI Inference Server 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x as a component of Red Hat AI Inference Server 3.3",
"product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
},
"product_reference": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x",
"relates_to_product_reference": "Red Hat AI Inference Server 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-11822",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-06-09T20:01:15.006955+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SQLite\u0027s FTS5 full-text search extension. This vulnerability involves memory corruption, specifically an out-of-bounds read and a heap buffer overflow, which can be triggered by supplying a crafted database with malformed FTS5 page data. When an FTS5 MATCH query is executed against such a database, an attacker can cause process crashes, memory exhaustion, or achieve arbitrary code execution, potentially compromising the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the SQLite FTS5 full-text search extension can lead to arbitrary code execution or denial of service. Exploitation requires an application to process a specially crafted SQLite database containing malformed FTS5 page data, which could occur if an attacker provides a malicious database to a vulnerable application. This risk is elevated in scenarios where applications handle untrusted SQLite database files.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11822"
},
{
"category": "external",
"summary": "RHBZ#2487258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11822"
},
{
"category": "external",
"summary": "https://sqlite.org/releaselog/3_53_2.html",
"url": "https://sqlite.org/releaselog/3_53_2.html"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/061febcf41ca",
"url": "https://sqlite.org/src/info/061febcf41ca"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/4a5ad516ea93",
"url": "https://sqlite.org/src/info/4a5ad516ea93"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension",
"url": "https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension"
}
],
"release_date": "2026-06-09T19:08:31.019000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data"
},
{
"cve": "CVE-2026-11824",
"cwe": {
"id": "CWE-191",
"name": "Integer Underflow (Wrap or Wraparound)"
},
"discovery_date": "2026-06-09T20:02:19.874232+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487269"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processing. Successful exploitation of this vulnerability can lead to a crash of the application or allow for arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in SQLite\u0027s FTS5 full-text search extension can lead to arbitrary code execution or application crashes due to a heap-based buffer overflow. Exploitation requires an attacker to provide a specially crafted SQLite database, which must then be processed by an application compiled with FTS5 support. While requiring user interaction and local access, the potential for full impact on system resources justifies the Important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11824"
},
{
"category": "external",
"summary": "RHBZ#2487269",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487269"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11824",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11824"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11824",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11824"
},
{
"category": "external",
"summary": "https://sqlite.org/releaselog/3_53_2.html",
"url": "https://sqlite.org/releaselog/3_53_2.html"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/061febcf41ca",
"url": "https://sqlite.org/src/info/061febcf41ca"
},
{
"category": "external",
"summary": "https://sqlite.org/src/info/4a5ad516ea93",
"url": "https://sqlite.org/src/info/4a5ad516ea93"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate",
"url": "https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate"
}
],
"release_date": "2026-06-09T19:21:42.603000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5"
},
{
"cve": "CVE-2026-48586",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-07-27T12:01:11.736259+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507434"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift. This vulnerability, categorized as improper handling of highly compressed data (also known as data amplification), allows a remote attacker to cause a Denial of Service (DoS) by sending specially crafted, highly compressed data. The affected component fails to properly manage the expansion of this data, leading to resource exhaustion and system unavailability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Apache Thrift\u0027s handling of highly compressed data can lead to a denial of service. Remote, unauthenticated attackers could exploit this flaw by sending specially crafted compressed data, causing excessive resource consumption and disrupting the availability of services utilizing vulnerable Thrift bindings in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48586"
},
{
"category": "external",
"summary": "RHBZ#2507434",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507434"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48586",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48586"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48586",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48586"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/37",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/37"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq",
"url": "https://lists.apache.org/thread/p008svsjf9p6bj47wyyf5dgglq5z7xoq"
}
],
"release_date": "2026-07-27T11:02:54.430000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: org.apache.thrift/libthrift: github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of highly compressed data"
},
{
"cve": "CVE-2026-55969",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-07-27T12:01:08.265881+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507433"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Thrift\u0027s C++, c_glib, Go, netstd, Delphi, and Haxe bindings. This integer overflow or wraparound vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted input. The flaw can lead to the affected service becoming unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Apache Thrift bindings, rated as Important, allows a remote attacker to trigger a denial of service. The integer overflow or wraparound flaw can lead to affected services becoming unavailable, impacting the reliability of systems utilizing vulnerable Thrift components across Red Hat products such as OpenShift Container Platform and Red Hat Ceph Storage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55969"
},
{
"category": "external",
"summary": "RHBZ#2507433",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507433"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55969",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55969"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55969"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/07/24/40",
"url": "http://www.openwall.com/lists/oss-security/2026/07/24/40"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9",
"url": "https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo",
"url": "https://lists.apache.org/thread/xmkgd107k795hyrg5kf97mny30sgl5bo"
}
],
"release_date": "2026-07-27T11:07:53.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "thrift: github.com/apache/thrift: Apache Thrift: Denial of Service via integer overflow or wraparound"
},
{
"acknowledgments": [
{
"names": [
"The FuzzAnything Team"
],
"organization": "FuzzAnything"
}
],
"cve": "CVE-2026-56208",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-06-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490799"
}
],
"notes": [
{
"category": "description",
"text": "A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder\u0027s Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because a heap buffer overflow with attacker-influenced data can cause reliable denial of service and potentially lead to code execution, though the attacker has only indirect control over the written values (encoder-computed statistics). In Red Hat products, libaom ships bundled within Firefox and Thunderbird as a statically-linked dependency used for AV1 decoding and WebRTC encoding. The vulnerable code path requires the encoder to be configured with g_lag_in_frames \u003e= 1 (Look-Ahead Processing mode). In Firefox\u0027s WebRTC implementation, the encoder configuration is controlled by the browser itself and not exposed to remote peers, which significantly limits the attack surface compared to standalone transcoding services. RHEL-AI 3.4 and Hummingbird 1 ship standalone libaom (aom) packages at versions within the affected range. Applications on those platforms that use the libaom encoder API with LAP mode and accept untrusted configuration input are vulnerable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56208"
},
{
"category": "external",
"summary": "RHBZ#2490799",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490799"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56208",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56208"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56208",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56208"
},
{
"category": "external",
"summary": "https://aomedia.googlesource.com/aom/+/243f8ae84b",
"url": "https://aomedia.googlesource.com/aom/+/243f8ae84b"
},
{
"category": "external",
"summary": "https://issues.chromium.org/issues/504317456",
"url": "https://issues.chromium.org/issues/504317456"
}
],
"release_date": "2026-06-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "workaround",
"details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If using libaom as a standalone encoder library, avoid setting g_lag_in_frames to values \u003e= 1 when processing untrusted input, or validate all encoder configuration parameters before passing them to the libaom API.\n2. For Firefox and Thunderbird, ensure browsers are updated to versions that include the patched libaom (v3.14.0 or later).\n3. For standalone libaom deployments (RHEL-AI, Hummingbird), restrict access to the encoding service to trusted clients only.\n4. Apply network-level access controls to limit who can submit video for encoding.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode"
},
{
"acknowledgments": [
{
"names": [
"The FuzzAnything Team"
],
"organization": "FuzzAnything"
}
],
"cve": "CVE-2026-56209",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490800"
}
],
"notes": [
{
"category": "description",
"text": "An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel values. The encoder then writes approximately 1,200 bytes at the attacker-controlled address. This is fully deterministic and does not require a separate information leak. An attacker who can supply frames to a network-facing libaom encoder with SVC enabled could exploit this for denial of service or potential code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libaom: libaom: arbitrary address write via SVC layer context OOB and cyclic refresh map pointer hijack",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Critical severity because it provides a fully deterministic arbitrary address write primitive that requires no information leak and is self-bootstrapping from attacker-controlled pixel values. The 1,200-byte write at an attacker-chosen address is sufficient for control flow hijacking. In Red Hat products, libaom ships bundled within Firefox and Thunderbird. The vulnerable code path requires the SVC (Scalable Video Coding) encoder feature to be enabled and the attacker to control both the layer_id configuration and the image frame pixel values. In Firefox\u0027s WebRTC implementation, SVC encoding parameters and frame submission are managed internally by the browser; a remote peer cannot directly set arbitrary layer IDs or inject pixel values into the local encoder. This significantly reduces exploitability in the browser context. RHEL-AI 3.4 (aom 3.12.0) and Hummingbird 1 (aom 3.13.3) ship standalone libaom packages within the affected version range. Services on those platforms that expose the SVC encoder API with attacker-controlled layer configuration and frame input are at highest risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56209"
},
{
"category": "external",
"summary": "RHBZ#2490800",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490800"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56209"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56209",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56209"
},
{
"category": "external",
"summary": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa",
"url": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa"
},
{
"category": "external",
"summary": "https://issues.chromium.org/issues/503993984",
"url": "https://issues.chromium.org/issues/503993984"
}
],
"release_date": "2026-06-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "workaround",
"details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If using libaom as a standalone encoder library with SVC enabled, validate that spatial_layer_id and temporal_layer_id values are within the configured range [0, configured_layers) before calling aom_codec_control with AV1E_SET_SVC_LAYER_ID.\n2. Restrict access to encoding services to trusted clients only. Do not expose libaom SVC encoder configuration to untrusted input.\n3. For Firefox and Thunderbird, ensure browsers are updated to versions that include the patched libaom (v3.14.0 or later).\n4. Deploy encoding services with ASLR, stack canaries, and other exploit mitigation technologies enabled.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libaom: libaom: arbitrary address write via SVC layer context OOB and cyclic refresh map pointer hijack"
},
{
"acknowledgments": [
{
"names": [
"The FuzzAnything Team"
],
"organization": "FuzzAnything"
}
],
"cve": "CVE-2026-56210",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-06-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490801"
}
],
"notes": [
{
"category": "description",
"text": "A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an out-of-bounds heap read of approximately 40,728 bytes when computing a layer context array index. An attacker who can influence SVC encoder parameters in a network-facing service could exploit this for information disclosure (heap content leak) or denial of service (segmentation fault from hitting unmapped memory).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because the 40KB out-of-bounds heap read can disclose sensitive information from adjacent heap allocations (including pointers useful for ASLR bypass in chained attacks) and reliably causes denial of service by hitting unmapped pages. In Red Hat products, libaom ships bundled within Firefox and Thunderbird. The vulnerable code path requires the SVC encoder feature to be enabled and an attacker to set spatial_layer_id to a value exceeding the number of configured spatial layers. In Firefox\u0027s WebRTC implementation, SVC layer parameters are managed internally by the browser and not directly exposed to remote peers, which limits exploitability. RHEL-AI 3.4 (aom 3.12.0) and Hummingbird 1 (aom 3.13.3) ship standalone libaom packages within the affected version range. Services that expose SVC encoder layer configuration to untrusted input are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56210"
},
{
"category": "external",
"summary": "RHBZ#2490801",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490801"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56210",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56210"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56210",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56210"
},
{
"category": "external",
"summary": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa",
"url": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa"
},
{
"category": "external",
"summary": "https://issues.chromium.org/issues/503975732",
"url": "https://issues.chromium.org/issues/503975732"
}
],
"release_date": "2026-06-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "workaround",
"details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If using libaom as a standalone encoder library with SVC enabled, validate that spatial_layer_id does not exceed the number of configured spatial layers before calling aom_codec_control with AV1E_SET_SVC_LAYER_ID.\n2. Restrict access to encoding services to trusted clients only.\n3. For Firefox and Thunderbird, ensure browsers are updated to versions that include the patched libaom (v3.14.0 or later).\n4. Monitor encoding service processes for unexpected crashes (segfaults) that may indicate exploitation attempts.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id"
},
{
"acknowledgments": [
{
"names": [
"The FuzzAnything Team"
],
"organization": "FuzzAnything"
}
],
"cve": "CVE-2026-56211",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-19T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490802"
}
],
"notes": [
{
"category": "description",
"text": "A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder\u0027s SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libaom: libaom: remote code execution via SVC layer context handling with attacker-controlled frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Critical severity because the researcher demonstrated successful remote code execution against a fork-based video processing service. The exploit chain leverages attacker-controlled pixel values to hijack internal encoder pointers, uses a crash oracle to brute-force ASLR, and ultimately achieves arbitrary command execution. However, the attack complexity is elevated: it requires a fork-based service architecture (for the crash oracle), multiple encoding attempts (for ASLR brute-force), and knowledge of the target binary layout. In Red Hat products, libaom ships bundled within Firefox and Thunderbird. Firefox does not use a fork-based architecture for WebRTC encoding, and SVC layer parameters are managed internally, making the demonstrated exploit chain not directly applicable to the browser context. RHEL-AI 3.4 (aom 3.12.0) and Hummingbird 1 (aom 3.13.3) ship standalone libaom packages within the affected version range. Fork-based transcoding or video conferencing services that use libaom with SVC encoding and accept attacker-supplied frames are at highest risk for this specific exploit chain.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56211"
},
{
"category": "external",
"summary": "RHBZ#2490802",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490802"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56211"
},
{
"category": "external",
"summary": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa",
"url": "https://aomedia.googlesource.com/aom/+/a93ba0ffaa"
},
{
"category": "external",
"summary": "https://issues.chromium.org/issues/503993985",
"url": "https://issues.chromium.org/issues/503993985"
}
],
"release_date": "2026-06-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "workaround",
"details": "There is no complete mitigation for this vulnerability. The following measures can reduce risk:\n\n1. If using libaom as a standalone encoder in a fork-based service, validate all SVC layer parameters (spatial_layer_id, temporal_layer_id) against configured bounds before passing them to the encoder API.\n2. Avoid fork-based architectures for encoding services that accept untrusted input. Use thread-based or container-isolated workers instead, which prevent crash oracle attacks.\n3. Restrict access to encoding services to trusted clients only. Do not expose SVC encoder configuration or frame submission to untrusted network input.\n4. For Firefox and Thunderbird, ensure browsers are updated to versions that include the patched libaom (v3.14.0 or later).\n5. Enable all available exploit mitigations (ASLR, PIE, stack canaries, CFI) on encoding service binaries.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libaom: libaom: remote code execution via SVC layer context handling with attacker-controlled frames"
},
{
"cve": "CVE-2026-58049",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-06-28T03:01:15.644058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493952"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FFmpeg\u0027s RASC video decoder. A remote attacker could exploit this by providing a crafted media stream using the RASC FourCC (Four Character Code), which is then decoded by libavcodec. This vulnerability triggers a bitstream-controlled out-of-bounds heap write and an adjacent out-of-bounds read, leading to memory corruption. This can result in a denial of service or potentially arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The vulnerability in FFmpeg\u0027s RASC video decoder is rated as Important. This flaw allows a remote attacker to cause memory corruption, potentially leading to denial of service or arbitrary code execution, by providing a specially crafted media stream. Red Hat products utilizing FFmpeg for RASC video decoding are at risk if they process untrusted media content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58049"
},
{
"category": "external",
"summary": "RHBZ#2493952",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493952"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58049"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58049",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58049"
},
{
"category": "external",
"summary": "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c",
"url": "https://github.com/FFmpeg/FFmpeg/blob/master/libavcodec/rasc.c"
},
{
"category": "external",
"summary": "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc",
"url": "https://github.com/bikini/exploitarium/tree/main/ffmpeg-rasc-dlta-calc-poc"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta",
"url": "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-write-in-rasc-decoder-decode-dlta"
}
],
"release_date": "2026-06-28T01:32:52.900000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FFmpeg: FFmpeg: Memory corruption via crafted RASC video stream"
},
{
"cve": "CVE-2026-64835",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-07-22T18:01:43.659646+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2506195"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in arbitrary code execution, information disclosure, or denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Conditions for Exploitation: Successful exploitation requires user interaction or a specific application workflow. An attacker cannot trigger this vulnerability entirely remotely on their own; they must supply a specially crafted ADX or AAX audio file and rely on a user or an automated media-processing system to actively parse it using the FFmpeg library.\n\nImpact Limitations: Although the out-of-bounds read and write vulnerabilities have the potential to allow for arbitrary code execution or information disclosure, achieving this reliably is highly complex and depends on the memory layout and protections of the specific application utilizing FFmpeg. In most typical scenarios, processing the malformed file will simply cause the parsing application to crash, resulting in a localized Denial of Service (DoS) rather than a full system compromise.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-64835"
},
{
"category": "external",
"summary": "RHBZ#2506195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506195"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-64835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-64835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-64835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64835"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e"
},
{
"category": "external",
"summary": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659",
"url": "https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder",
"url": "https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"
}
],
"release_date": "2026-07-22T17:24:05.477000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files"
},
{
"cve": "CVE-2026-69243",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-08-03T22:02:56.444781+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510831"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before the entire body is received. This leaves trailing data to be processed incorrectly, potentially enabling an attacker to bypass security mechanisms or gain unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact. This vulnerability in aiohttp\u0027s HTTP parser enables request smuggling when the server-side component handles WebSocket upgrade requests containing a body. An attacker could exploit an edge case during protocol switching, causing trailing data to be processed as subsequent requests or upgraded protocol data. This affects Red Hat products utilizing aiohttp in a server-side capacity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69243"
},
{
"category": "external",
"summary": "RHBZ#2510831",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510831"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69243"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",
"url": "https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/pull/13017",
"url": "https://github.com/aio-libs/aiohttp/pull/13017"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2",
"url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v"
}
],
"release_date": "2026-08-03T20:45:43.406000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade"
},
{
"cve": "CVE-2026-69244",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-03T22:02:32.583060+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit this to trigger a Denial of Service (DoS) in the client application, making it unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important severity flaw in aiohttp that could lead to a denial of service in client applications. A remote, malicious HTTP server could send a specially crafted response, causing an out-of-bounds read in the aiohttp C response parser and resulting in the client application terminating unexpectedly.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69244"
},
{
"category": "external",
"summary": "RHBZ#2510825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69244"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69244",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69244"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d",
"url": "https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/pull/13223",
"url": "https://github.com/aio-libs/aiohttp/pull/13223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3",
"url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273"
}
],
"release_date": "2026-08-03T20:50:59.538000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-17T15:47:06+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:68697",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68697"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea_amd64",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:4009f21302b24b30cefaa86e84e77cf1743d9dfc7b93aae93b9c2082871d62fc_ppc64le",
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:f8136d9ebefd2ab84f78f4e29de0ca77c91bcf76ea3672d166687cb606353a88_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…