Advisories · Technology
Red Hat AI Inference Server 3.3.
Every CVE that names Red Hat AI Inference Server 3.3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames
- Red Hat Enterprise Linux AI 3.3 for RHEL 9
- Red Hat Enterprise Linux AI 3.4 for RHEL 9
- Memory corruption
- CVSS 7.1 High
Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id
- Red Hat Enterprise Linux AI 3.3 for RHEL 9
- Red Hat Enterprise Linux AI 3.4 for RHEL 9
- Memory corruption
- CVSS 7.6 High
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Memory corruption
- CVSS 7.1 High
Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack
- Red Hat Enterprise Linux AI 3.3 for RHEL 9
- Red Hat Enterprise Linux AI 3.4 for RHEL 9
- Memory corruption
- CVSS 7.8 High
Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.8 High
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption
- CVSS 7.5 High
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 5.3 Medium
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Denial of service
- CVSS 7.5 High
Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Memory corruption