CVE record · CVE-2026-56210

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

CVSS 7.1 HighEPSS 0.0058 · 47th percentile

Published by the CVE Program (CNA: redhat) at 19 Jun 2026, 16:28 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux AI 3.3 for RHEL 9 Package name: aom https://access.redhat.com/downloads/content/package-browser/	unaffected 0:3.14.0-1.el9ai to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux AI 3.4 for RHEL 9 Package name: aom https://access.redhat.com/downloads/content/package-browser/	unaffected 0:3.14.0-1.el9ai to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux AI 3.5 for RHEL 9 Package name: aom https://access.redhat.com/downloads/content/package-browser/	unaffected 0:3.14.0-1.el9ai to before * rpm Other versions: affected
Red Hat	Red Hat AI Inference Server 3.2 Package name: rhaiis/vllm-cuda-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1787860580 to before * rpm Other versions: affected
Red Hat	Red Hat AI Inference Server 3.2 Package name: rhaiis/model-opt-cuda-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1787772157 to before * rpm Other versions: affected
Red Hat	Red Hat AI Inference Server 3.2 Package name: rhaiis/vllm-rocm-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1787884873 to before * rpm Other versions: affected
Red Hat	Red Hat AI Inference Server 3.3 Package name: rhaiis/model-opt-cuda-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789508287 to before * rpm Other versions: affected
Red Hat	Red Hat AI Inference Server 3.3 Package name: rhaiis/vllm-spyre-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789502493 to before * rpm Other versions: affected
Red Hat	Red Hat AI Inference Server 3.3 Package name: rhaiis/vllm-rocm-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789504371 to before * rpm Other versions: affected
Red Hat	Red Hat AI Inference Server 3.3 Package name: rhaiis/vllm-cuda-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789582776 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux AI 3.3 Package name: rhelai3/bootc-aws-cuda-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790936334 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux AI 3.3 Package name: rhelai3/bootc-azure-cuda-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790936351 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux AI 3.3 Package name: rhelai3/bootc-azure-rocm-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790850900 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux AI 3.3 Package name: rhelai3/bootc-cuda-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790866732 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux AI 3.3 Package name: rhelai3/bootc-gcp-cuda-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790936334 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux AI 3.3 Package name: rhelai3/bootc-rocm-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790791893 to before * rpm Other versions: affected
Red Hat	Red Hat Enterprise Linux AI 3.3 Package name: rhelai3/disk-image-cuda-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1790954179 to before * rpm Other versions: affected
Red Hat	Red Hat Hardened Images Package name: aom-main https://catalog.redhat.com/software/containers/	unaffected 3.14.0-0.1.hum1 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.3 Package name: rhai/base-image-neuron-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789137552 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.3 Package name: rhai/base-image-rocm-7.0-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789137548 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.3 Package name: rhai/base-image-cuda-13.0-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789137636 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.3 Package name: rhai/base-image-tpu-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789137548 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.3 Package name: rhai/base-image-rocm-6.4-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789137548 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.3 Package name: rhai/base-image-cpu-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789137641 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.3 Package name: rhai/base-image-spyre-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789137607 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.3 Package name: rhai/base-image-cuda-12.9-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1789137636 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhoai/odh-mlserver-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1786611800 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhoai/odh-th06-cpu-torch210-py312-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1787076778 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhoai/odh-th06-cuda130-torch210-py312-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1787077779 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhoai/odh-th06-rocm64-torch291-py312-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1787076481 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhai/base-image-tpu-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788197680 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhai/base-image-cpu-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788197530 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhai/base-image-gaudi-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788197632 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhai/base-image-spyre-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788197747 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhai/base-image-rocm-7.1-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788197549 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhai/base-image-cuda-12.9-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788199622 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhai/base-image-cuda-13.0-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788197744 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhai/base-image-rocm-6.4-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788197677 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.4 Package name: rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1791785804 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 3.5 Package name: rhai/base-image-neuron-rhel9 https://catalog.redhat.com/software/containers/	unaffected 1788198404 to before * rpm Other versions: affected

And 45 more products. The full list is on the CVE record.

Identifiers: CVE-2026-56210
CNA: redhat
Weakness (CWE): CWE-125
Tags: Red Hat Enterprise Linux AI 3.3 for RHEL 9
Red Hat Enterprise Linux AI 3.4 for RHEL 9
Red Hat Enterprise Linux AI 3.5 for RHEL 9
Red Hat AI Inference Server 3.2
Red Hat AI Inference Server 3.3
Red Hat Enterprise Linux AI 3.3
Red Hat Hardened Images
Red Hat OpenShift AI 3.3
Memory corruption
Published: 19 Jun 2026
Updated: 4 Nov 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
7.1	High	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H	CNA (redhat)Used for this record
7.1	High	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H	ADP (redhat-SADP)

CISA KEV Not listed.
EPSS 0.0058, the 47th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

19 Jun 2026, 16:28 UTC Confirmed by the CVE List
19 Jun 2026, 17:16 UTC Confirmed by NVD

Sources

References from the CNA

access.redhat.com/errata/RHSA-2026:30814 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:42875 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:51100 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:51146 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:60520 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:61627 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:61628 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:61629 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68634 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68637 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68638 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68639 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68640 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68696 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68697 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68698 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68699 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68708 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68709 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:68710 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:69927 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:69929 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:69930 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:69931 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:69932 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:69933 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:69934 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:69935 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:71392 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2026:71393 vendor-advisoryredhat

And 22 more on the CVE record.

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.