目标达成感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%

请我们喝杯咖啡

CVE-2026-56210— AOMedia libaom 缓冲区错误漏洞

一分钟漏洞结论

影响对象

Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9

利用判断

尚无明确在野利用证据，仍需结合暴露面评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

AOMedia libaom是AOMedia组织开源的一个视频编码库。 AOMedia libaom存在缓冲区错误漏洞，该漏洞源于SVC（可伸缩视频编码）层ID控制函数中缺少边界检查，允许设置超出配置层数的spatial_layer_id，导致在计算层上下文数组索引时发生越界堆读取约40,728字节，攻击者可通过影响网络服务中的SVC编码器参数利用此漏洞进行信息泄露或拒绝服务攻击。

CVSS 7.1 · High EPSS 0.58% · P46 更新于 2026-09-28

可能的 ATT&CK 技术 2 AI

T1005 · Data from Local System T1499 · Endpoint Denial of Service

影响版本矩阵 66

厂商	产品	版本范围	状态
Red Hat	Red Hat AI Inference Server	`全部`	affected
		`全部`	affected
		`全部`	affected
		`全部`	affected
		`全部`	affected
		`全部`	affected
		`全部`	affected
Red Hat	Red Hat AI Inference Server 3.2	`1787860580< *`	unaffected
		`1787772157< *`	unaffected
		`1787884873< *`	unaffected
Red Hat	Red Hat AI Inference Server 3.3	`1789508287< *`	unaffected
		`1789502493< *`	unaffected
		`1789504371< *`	unaffected
		`1789582776< *`	unaffected
Red Hat	Red Hat Enterprise Linux 10	`全部`	affected
		`全部`	affected
Red Hat	Red Hat Enterprise Linux 9	`全部`	affected
		`全部`	affected
Red Hat	Red Hat Enterprise Linux AI 3.3 for RHEL 9	`0:3.14.0-1.el9ai< *`	unaffected
Red Hat	Red Hat Enterprise Linux AI 3.4 for RHEL 9	`0:3.14.0-1.el9ai< *`	unaffected
Red Hat	Red Hat Enterprise Linux AI 3.5 for RHEL 9	`0:3.14.0-1.el9ai< *`	unaffected
Red Hat	Red Hat Hardened Images	`3.14.0-0.1.hum1< *`	unaffected
Red Hat	Red Hat OpenShift AI (RHOAI)	`全部`	unaffected
		`全部`	unaffected
		`全部`	unaffected
		`全部`	unaffected
		`全部`	unaffected
		`全部`	unaffected
		`全部`	unaffected
		`全部`	unaffected
… +7 条更多
Red Hat	Red Hat OpenShift AI 3.3	`1789137552< *`	unaffected
		`1789137548< *`	unaffected
		`1789137636< *`	unaffected
		`1789137548< *`	unaffected
		`1789137548< *`	unaffected
		`1789137641< *`	unaffected
		`1789137607< *`	unaffected
		`1789137636< *`	unaffected
Red Hat	Red Hat OpenShift AI 3.4	`1786611800< *`	unaffected
		`1787076778< *`	unaffected
		`1787077779< *`	unaffected
		`1787076481< *`	unaffected
		`1788197680< *`	unaffected
		`1788197530< *`	unaffected
		`1788197632< *`	unaffected
		`1788197747< *`	unaffected
… +4 条更多
Red Hat	Red Hat OpenShift AI 3.5	`1788198404< *`	unaffected
		`1788198407< *`	unaffected
		`1788197492< *`	unaffected
		`1788197542< *`	unaffected
		`1788197975< *`	unaffected
		`1788197512< *`	unaffected
		`1788197688< *`	unaffected
		`1788197385< *`	unaffected
… +1 条更多

获取后续新漏洞提醒登录后订阅

一、漏洞 CVE-2026-56210 基础信息

漏洞信息

对漏洞内容有疑问？看看神龙的深度分析是否有帮助！

查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

来源: CVE Program / CVE List V5

Vulnerability Description

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an out-of-bounds heap read of approximately 40,728 bytes when computing a layer context array index. An attacker who can influence SVC encoder parameters in a network-facing service could exploit this for information disclosure (heap content leak) or denial of service (segmentation fault from hitting unmapped memory).

来源: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

来源: CVE Program / CVE List V5

Vulnerability Type

跨界内存读

来源: CVE Program / CVE List V5

Vulnerability Title

AOMedia libaom 缓冲区错误漏洞

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Description

来源: 中国国家信息安全漏洞库 CNNVD

CVSS Information

N/A

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Type

N/A

来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商	产品	影响版本	CPE
Red Hat	Red Hat Enterprise Linux AI 3.3 for RHEL 9	0:3.14.0-1.el9ai ~ *	`cpe:/a:redhat:enterprise_linux_ai:3.3::el9`
Red Hat	Red Hat Enterprise Linux AI 3.4 for RHEL 9	0:3.14.0-1.el9ai ~ *	`cpe:/a:redhat:enterprise_linux_ai:3.4::el9`
Red Hat	Red Hat Enterprise Linux AI 3.5 for RHEL 9	0:3.14.0-1.el9ai ~ *	`cpe:/a:redhat:enterprise_linux_ai:3.5::el9`
Red Hat	Red Hat AI Inference Server 3.2	1787860580 ~ *	`cpe:/a:redhat:ai_inference_server:3.2::el9`
Red Hat	Red Hat AI Inference Server 3.2	1787772157 ~ *	`cpe:/a:redhat:ai_inference_server:3.2::el9`
Red Hat	Red Hat AI Inference Server 3.2	1787884873 ~ *	`cpe:/a:redhat:ai_inference_server:3.2::el9`
Red Hat	Red Hat AI Inference Server 3.3	1789508287 ~ *	`cpe:/a:redhat:ai_inference_server:3.3::el9`
Red Hat	Red Hat AI Inference Server 3.3	1789502493 ~ *	`cpe:/a:redhat:ai_inference_server:3.3::el9`
Red Hat	Red Hat AI Inference Server 3.3	1789504371 ~ *	`cpe:/a:redhat:ai_inference_server:3.3::el9`
Red Hat	Red Hat AI Inference Server 3.3	1789582776 ~ *	`cpe:/a:redhat:ai_inference_server:3.3::el9`
Red Hat	Red Hat Hardened Images	3.14.0-0.1.hum1 ~ *	`cpe:/a:redhat:hummingbird:1`
Red Hat	Red Hat OpenShift AI 3.3	1789137552 ~ *	`cpe:/a:redhat:openshift_ai:3.3::el9`
Red Hat	Red Hat OpenShift AI 3.3	1789137548 ~ *	`cpe:/a:redhat:openshift_ai:3.3::el9`
Red Hat	Red Hat OpenShift AI 3.3	1789137636 ~ *	`cpe:/a:redhat:openshift_ai:3.3::el9`
Red Hat	Red Hat OpenShift AI 3.3	1789137548 ~ *	`cpe:/a:redhat:openshift_ai:3.3::el9`
Red Hat	Red Hat OpenShift AI 3.3	1789137548 ~ *	`cpe:/a:redhat:openshift_ai:3.3::el9`
Red Hat	Red Hat OpenShift AI 3.3	1789137641 ~ *	`cpe:/a:redhat:openshift_ai:3.3::el9`
Red Hat	Red Hat OpenShift AI 3.3	1789137607 ~ *	`cpe:/a:redhat:openshift_ai:3.3::el9`
Red Hat	Red Hat OpenShift AI 3.3	1789137636 ~ *	`cpe:/a:redhat:openshift_ai:3.3::el9`
Red Hat	Red Hat OpenShift AI 3.4	1786611800 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1787076778 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1787077779 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1787076481 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1788197680 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1788197530 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1788197632 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1788197747 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1788197549 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1788199622 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`
Red Hat	Red Hat OpenShift AI 3.4	1788197744 ~ *	`cpe:/a:redhat:openshift_ai:3.4::el9`

二、漏洞 CVE-2026-56210 的公开POC

#	POC 描述	源链接	神龙链接

AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-56210 的情报信息

请登录查看更多情报信息。

CVE-2026-56210 补丁与修复 (2)

CVE-2026-56210 厂商安全公告 (38)

🔗 2490801 – (CVE-2026-56210) CVE-2026-56210 libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id 查看完整文章 issue-tracking x_refsource_REDHAT
🔗 RHSA-2026:51146 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:60520 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:30814 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71394 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:69934 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:61628 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68708 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:69932 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68640 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68697 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:69931 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:42875 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71397 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71395 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71401 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68699 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:69933 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71392 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68634 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68696 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:61629 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71398 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71396 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68639 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68698 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71399 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:69930 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:71393 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68637 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68638 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:69935 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:69929 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:61627 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:51100 - Security Advisory - Red Hat Customer Portal 查看完整文章 vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68709 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:68710 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT
🔗 RHSA-2026:69927 - Security Advisory - Red Hat Customer Portal vendor-advisory x_refsource_REDHAT

CVE-2026-56210 其他参考 (1)

https://access.redhat.com/security/cve/CVE-2026-56210 vdb-entry x_refsource_REDHAT

https://www.cve.org/CVERecord?id=CVE-2026-56210

同批安全公告 · Red Hat · 2026-06-19 · 共 6 条

CVE-2026-56208	7.6 HIGH	AOMedia libaom 缓冲区错误漏洞
CVE-2026-56209	7.1 HIGH	AOMedia libaom 缓冲区错误漏洞
CVE-2026-56211	7.1 HIGH	AOMedia libaom 缓冲区错误漏洞
CVE-2026-12706	6.5 MEDIUM	FFmpeg 资源管理错误漏洞
CVE-2026-12726	6.3 MEDIUM	Red Hat Ansible Automation Platform 2 服务端请求伪造漏洞

IV. Related Vulnerabilities

Same product: Red Hat Enterprise Linux AI 3.3 for RHEL 9

Same vendor: Red Hat

Same weakness: CWE-125

V. Comments for CVE-2026-56210

暂无评论

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

CVE-2026-56210— AOMedia libaom 缓冲区错误漏洞

一分钟漏洞结论

可能的 ATT&CK 技术 2 AI

影响版本矩阵 66

一、 漏洞 CVE-2026-56210 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2026-56210 的公开POC

三、漏洞 CVE-2026-56210 的情报信息

CVE-2026-56210 补丁与修复 (2)

CVE-2026-56210 厂商安全公告 (38)

CVE-2026-56210 其他参考 (1)

同批安全公告 · Red Hat · 2026-06-19 · 共 6 条

IV. Related Vulnerabilities

V. Comments for CVE-2026-56210

发表评论

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

一、漏洞 CVE-2026-56210 基础信息