CVE-2026-56208: Heap-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 8
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.
AI Analysis
Technical Summary
A heap buffer overflow vulnerability exists in libaom's AV1 encoder Look-Ahead Processing mode when g_lag_in_frames is set to 1 or higher. This causes a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap memory. An attacker able to control encoder configuration in environments such as transcoding services or WebRTC sessions could exploit this flaw to cause process crashes or potentially execute arbitrary code. Red Hat has issued security advisories and updates for Red Hat Enterprise Linux AI 3.5 for RHEL 9, providing patched libaom packages (version 3.14.0-1.el9ai) to remediate this vulnerability.
Potential Impact
Successful exploitation can cause denial of service via process crashes or potentially allow arbitrary code execution due to heap corruption. The vulnerability affects systems using the vulnerable libaom AV1 encoder in Red Hat Enterprise Linux AI 3.5 for RHEL 9. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated libaom packages (version 3.14.0-1.el9ai) that fix this vulnerability. Users of Red Hat Enterprise Linux AI 3.5 for RHEL 9 should apply the security updates as detailed in Red Hat advisories RHSA-2026:30814 and RHSA-2026:42875. Prior to applying these updates, ensure all previously released errata relevant to the system have been applied. No alternative mitigations or workarounds are specified by Red Hat.
CVE-2026-56208: Heap-based Buffer Overflow in Red Hat Red Hat Enterprise Linux 8
Description
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.
CVSS v3.1
Score 7.6high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
A heap buffer overflow vulnerability exists in libaom's AV1 encoder Look-Ahead Processing mode when g_lag_in_frames is set to 1 or higher. This causes a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap memory. An attacker able to control encoder configuration in environments such as transcoding services or WebRTC sessions could exploit this flaw to cause process crashes or potentially execute arbitrary code. Red Hat has issued security advisories and updates for Red Hat Enterprise Linux AI 3.5 for RHEL 9, providing patched libaom packages (version 3.14.0-1.el9ai) to remediate this vulnerability.
Potential Impact
Successful exploitation can cause denial of service via process crashes or potentially allow arbitrary code execution due to heap corruption. The vulnerability affects systems using the vulnerable libaom AV1 encoder in Red Hat Enterprise Linux AI 3.5 for RHEL 9. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated libaom packages (version 3.14.0-1.el9ai) that fix this vulnerability. Users of Red Hat Enterprise Linux AI 3.5 for RHEL 9 should apply the security updates as detailed in Red Hat advisories RHSA-2026:30814 and RHSA-2026:42875. Prior to applying these updates, ensure all previously released errata relevant to the system have been applied. No alternative mitigations or workarounds are specified by Red Hat.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-06-19T15:50:16.801Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-56208","vendor":"Red Hat"}]
Threat ID: 6a3576cef198dc38c1c38ec1
Added to database: 06/19/2026, 17:05:18 UTC
Last enriched: 07/25/2026, 22:28:34 UTC
Last updated: 08/01/2026, 07:18:01 UTC
Views: 198
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.