CVE-2026-56211
Last modified
CVE-2026-56211 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. EPSS estimates a 0.45% chance of exploitation in the next 30 days.
Description
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal encoder layer context structures. In fork-based video processing services, an attacker can use this to hijack the cyclic refresh map pointer, brute-force the process base address via a crash oracle, and redirect control flow to achieve arbitrary command execution. Exploitation requires the target service to use libaom with SVC encoding enabled and accept attacker-supplied video frames.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux AI 3.3 for RHEL 9 | All versions |
| Red Hat | Red Hat Enterprise Linux AI 3.4 for RHEL 9 | All versions |
| Red Hat | Red Hat Enterprise Linux AI 3.5 for RHEL 9 | All versions |
| Red Hat | Red Hat Hardened Images | All versions |
| Red Hat | Red Hat AI Inference Server | All versions |
| Red Hat | Red Hat Enterprise Linux 10 | All versions |
| Red Hat | Red Hat Enterprise Linux 9 | All versions |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-56211?
How severe is CVE-2026-56211?
How do I fix CVE-2026-56211?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-56197Improper neutralization of special elements used in a comman…8.8
- CVE-2026-5620A vulnerability has been found in itsourcecode Construction …6.3
- CVE-2026-56208A heap buffer overflow vulnerability was found in libaom, th…7.6
- CVE-2026-56209An arbitrary address write vulnerability was found in libaom…7.1
- CVE-2026-5621A vulnerability was found in ChrisChinchilla Vale-MCP up to …5.3
- CVE-2026-56210A heap-buffer-overflow read vulnerability was found in libao…7.1
- CVE-2026-56212Capgo before 12.128.2 contains an authentication logic flaw:…5.1
- CVE-2026-56213Capgo before 12.128.2 contains an authorization bypass vulne…6.9
- CVE-2026-56214Capgo before 12.128.2 contains an information disclosure vul…8.7
- CVE-2026-56215Capgo before 12.128.12 allows authenticated users to modify …8.7
- CVE-2026-56216Capgo before 12.128.2 contains a scope escalation vulnerabil…8.8
- CVE-2026-56217Capgo before 12.128.2 contains a policy bypass vulnerability…5.3
Are you affected by CVE-2026-56211?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST