CVE-2026-56211Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

Description

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.

Timeline

Scores

EPSS (exploitation in 30 days)

0.88% · top 40% of all CVEs (14 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.

Affected products

• Red Hat · Red Hat Enterprise Linux AI 3.3 for RHEL 9

  • unaffected 0:3.14.0-1.el9ai – < *

• Red Hat · Red Hat Enterprise Linux AI 3.4 for RHEL 9

  • unaffected 0:3.14.0-1.el9ai – < *

• Red Hat · Red Hat Enterprise Linux AI 3.5 for RHEL 9

  • unaffected 0:3.14.0-1.el9ai – < *

• Red Hat · Red Hat AI Inference Server 3.2

  • unaffected 1787860580 – < *

• Red Hat · Red Hat AI Inference Server 3.2

  • unaffected 1787772157 – < *

• Red Hat · Red Hat AI Inference Server 3.2

  • unaffected 1787884873 – < *

• Red Hat · Red Hat AI Inference Server 3.3

  • unaffected 1789508287 – < *

• Red Hat · Red Hat AI Inference Server 3.3

  • unaffected 1789502493 – < *

• Red Hat · Red Hat AI Inference Server 3.3

  • unaffected 1789504371 – < *

• Red Hat · Red Hat AI Inference Server 3.3

  • unaffected 1789582776 – < *

• Red Hat · Red Hat Enterprise Linux AI 3.3

  • unaffected 1790936334 – < *

• Red Hat · Red Hat Enterprise Linux AI 3.3

  • unaffected 1790936351 – < *

• Red Hat · Red Hat Enterprise Linux AI 3.3

  • unaffected 1790850900 – < *

• Red Hat · Red Hat Enterprise Linux AI 3.3

  • unaffected 1790866732 – < *

• Red Hat · Red Hat Enterprise Linux AI 3.3

  • unaffected 1790936334 – < *

• Red Hat · Red Hat Enterprise Linux AI 3.3

  • unaffected 1790791893 – < *

• Red Hat · Red Hat Enterprise Linux AI 3.3

  • unaffected 1790954179 – < *

• Red Hat · Red Hat Hardened Images

  • unaffected 3.14.0-0.1.hum1 – < *

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1789137552 – < *

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1789137548 – < *

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1789137636 – < *

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1789137548 – < *

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1789137548 – < *

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1789137641 – < *

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1789137607 – < *

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1789137636 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1786611800 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1787076778 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1787077779 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1787076481 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1788197680 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1788197530 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1788197632 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1788197747 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1788197549 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1788199622 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1788197744 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1788197677 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1791785804 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1788198404 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1788198407 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1788197492 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1788197542 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1788197975 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1788197512 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1788197688 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1788197385 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1788198016 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1790703552 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1790703656 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1790703557 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1790703645 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1790703554 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1790703554 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1790703630 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1790703706 – < *

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat AI Inference Server

  All versions: affected

• Red Hat · Red Hat Enterprise Linux 10

  All versions: affected

• Red Hat · Red Hat Enterprise Linux 10

  All versions: affected

• Red Hat · Red Hat Enterprise Linux 9

  All versions: affected

• Red Hat · Red Hat Enterprise Linux 9

  All versions: affected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

• Red Hat · Red Hat OpenShift AI (RHOAI)

  All versions: unaffected

What to do

Workaround: There is no complete mitigation for this vulnerability. The following measures can reduce risk: 1. If using libaom as a standalone encoder in a fork-based service, validate all SVC layer parameters (spatial_layer_id, temporal_layer_id) against configured bounds before passing them to the encoder API. 2. Avoid fork-based architectures for encoding services that accept untrusted input. Use thread-based or container-isolated workers instead, which prevent crash oracle attacks. 3. Restrict access to encoding services to trusted clients only. Do not expose SVC encoder configuration or frame submission to untrusted network input. 4. For Firefox and Thunderbird, ensure browsers are updated to versions that include the patched libaom (v3.14.0 or later). 5. Enable all available exploit mitigations (ASLR, PIE, stack canaries, CFI) on encoding service binaries.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2026-38047 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2026-56211](https://cveledger.app/badge/CVE-2026-56211.svg)](https://cveledger.app/cve/CVE-2026-56211)

Record last updated 4 Nov 2026, 22:51 UTC.