rpm package
opensuse/libaom&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/libaom&distro=openSUSE%20Leap%2016.0
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-56211 | Hig | 7.1 | < 3.11.0-160000.3.1 | 3.11.0-160000.3.1 | Jun 19, 2026 | A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal e | |
| CVE-2026-56210 | Hig | 7.1 | < 3.11.0-160000.3.1 | 3.11.0-160000.3.1 | Jun 19, 2026 | A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an o | |
| CVE-2026-56209 | Hig | 7.1 | < 3.11.0-160000.3.1 | 3.11.0-160000.3.1 | Jun 19, 2026 | An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafte | |
| CVE-2026-56208 | Hig | 7.6 | < 3.11.0-160000.3.1 | 3.11.0-160000.3.1 | Jun 19, 2026 | A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This |
- affected < 3.11.0-160000.3.1fixed 3.11.0-160000.3.1
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal e
- affected < 3.11.0-160000.3.1fixed 3.11.0-160000.3.1
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an o
- affected < 3.11.0-160000.3.1fixed 3.11.0-160000.3.1
An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafte
- affected < 3.11.0-160000.3.1fixed 3.11.0-160000.3.1
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This