https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:47:20.906315+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:47104 ALSA-2026:47104 — Important: firefox security update 2026-10-04T02:47:21.648747+00:00

Affected: AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208) * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718) * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350) * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391) * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412) * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361) *…

 https://cve.radiocsirt.org/vuln/euvd-2026-382017 EUVD-2026-382017 2026-10-04T02:47:21.648864+00:00 EUVD-2026-382017 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56208 fkie_cve-2026-56208 2026-10-04T02:47:21.648882+00:00

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.

 https://cve.radiocsirt.org/vuln/ghsa-mgv2-4j37-m3x6 GHSA-mgv2-4j37-m3x6 2026-10-04T02:47:21.648912+00:00

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21061-1 openSUSE-SU-2026:21061-1 — Security update for libaom 2026-10-04T02:47:21.648930+00:00

Security update for libaom

 https://cve.radiocsirt.org/vuln/rhsa-2026:30814 RHSA-2026:30814 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-04T02:47:21.648950+00:00

libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode libaom: libaom: arbitrary address write via SVC layer context OOB and cyclic refresh map pointer hijack libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id libaom: libaom: remote code execution via SVC layer context handling with attacker-controlled frames

 https://cve.radiocsirt.org/vuln/rlsa-2026:47104 RLSA-2026:47104 — Important: firefox security update 2026-10-04T02:47:21.648972+00:00

Affected: Rocky Linux:9: firefox

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

Security Fix(es):

* libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)

* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)

* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)

* firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)

* firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)

* firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)

* firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)

* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)

* firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)

* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)

* firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)

* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)

* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)

* firefox: thunderbi…

 https://cve.radiocsirt.org/vuln/suse-su-2026:22369-1 SUSE-SU-2026:22369-1 — Security update for libaom 2026-10-04T02:47:21.649018+00:00

Security update for libaom

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56208 UBUNTU-CVE-2026-56208 2026-10-04T02:47:21.649036+00:00

Affected: Ubuntu:Pro:22.04:LTS: aom, Ubuntu:24.04:LTS: aom, Ubuntu:25.10: aom, Ubuntu:26.04:LTS: aom

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2693 WID-SEC-W-2026-2693 — Red Hat Enterprise Linux AI (libaom): Mehrere Schwachstellen 2026-10-04T02:47:21.649063+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux AI ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.