The vulnerability CVE-2026-56210 affects libaom, the reference AV1 codec implementation, specifically in the SVC layer ID control function where a missing bounds check permits setting a spatial_layer_id beyond the configured number of layers. This results in an out-of-bounds heap read of approximately 40,728 bytes when computing a layer context array index. An attacker able to influence SVC encoder parameters in a network-facing service could exploit this flaw to leak heap memory contents or cause a segmentation fault leading to denial of service. Red Hat has issued security advisories RHSA-2026:30814 and RHSA-2026:42875, providing updated RPM packages (aom and libaom version 3.14.0-0.1.hum1 and 3.14.0-1.el9ai) that fix this vulnerability. The affected product is Red Hat Enterprise Linux AI 3.3 and 3.5 for RHEL 9, with affected versions starting from 3.5 and above. The CVSS v3.1 score is 7.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impact limited to confidentiality loss and high availability impact.

The vulnerability allows an attacker who can influence SVC encoder parameters in a network-facing service to cause an out-of-bounds heap read of approximately 40,728 bytes. This can lead to information disclosure through heap content leakage or denial of service due to segmentation faults from accessing unmapped memory. The CVSS score of 7.1 reflects a high severity impact with confidentiality loss and service disruption possible.

Red Hat has released security updates that fix this vulnerability. Users of Red Hat Enterprise Linux AI 3.3 and 3.5 for RHEL 9 should apply the updated RPM packages aom and libaom version 3.14.0-0.1.hum1 or 3.14.0-1.el9ai as provided in advisories RHSA-2026:30814 and RHSA-2026:42875. Before applying these updates, ensure all previously released errata relevant to your system have been applied. There is no indication that the vulnerability is mitigated without applying these updates. No known exploits are reported in the wild at this time.