Search: CVE-2026-8461

A security advisory from Red Hat addresses multiple vulnerabilities affecting Red Hat AI Base Images 3.2.5 (ROCm 7.0), including CVE-2026-8461 and others. One notable flaw is an integer overflow in FFmpeg's processing of Common Encryption (CENC) subsample data, which can lead to out-of-bounds writes. This flaw could allow a local attacker, through processing a specially crafted media file, to cause information disclosure, data corruption, or denial of service. Red Hat rates this FFmpeg vulnerability as moderate impact, differing from other sources due to the local attack vector and required user interaction. No fixes are currently available for these issues in the affected Red Hat AI Base Images. Red Hat is pursuing fixes through product streams, but mitigation options are limited or unavailable at this time.