This vulnerability involves a use-after-free condition in the RASC video decoder of FFmpeg as integrated in Red Hat Enterprise Linux AI (RHEL AI) 3. Specifically, the decode_move() function sets a read pointer into a decompressed buffer, but subsequent buffer reallocation during move-table processing invalidates this pointer. When processing a maliciously crafted AVI file containing a RASC video stream, the decoder may read from freed memory, leading to a denial of service via application crash. The CVSS 3.1 base score is 6.5, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction needed, and impact limited to availability.

Successful exploitation results in a denial of service condition due to the decoder reading from freed heap memory and crashing. There is no indication of confidentiality or integrity impact. The vulnerability requires user interaction (opening or playing a malicious AVI file) and can be triggered remotely over the network.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-12706 for current remediation guidance. No official fix or workaround is currently documented in the provided advisory content. Until a patch is available, users should exercise caution when opening untrusted AVI files containing RASC video streams.