https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:13:56 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:47104 <p><strong>Affected:</strong> AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208) * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718) * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350) * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391) * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412) * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361) *…</p> <p><strong>Affected:</strong> AlmaLinux:9: firefox, AlmaLinux:9: firefox-x11</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208) * firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719) * firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718) * firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390) * firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350) * firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391) * firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375) * firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356) * firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412) * firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381) * firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355) * firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361) *…</p> https://cve.radiocsirt.org/vuln/alsa-2026:47104 https://cve.radiocsirt.org/vuln/euvd-2026-382017 EUVD-2026-382017 https://cve.radiocsirt.org/vuln/euvd-2026-382017 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56208 <p>A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder&#39;s Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.</p> <p>A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder&#39;s Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56208 https://cve.radiocsirt.org/vuln/ghsa-mgv2-4j37-m3x6 <p>A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder&#39;s Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.</p> <p>A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder&#39;s Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-mgv2-4j37-m3x6 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21061-1 <p>Security update for libaom</p> <p>Security update for libaom</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21061-1 https://cve.radiocsirt.org/vuln/rhsa-2026:30814 <p>libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode libaom: libaom: arbitrary address write via SVC layer context OOB and cyclic refresh map pointer hijack libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id libaom: libaom: remote code execution via SVC layer context handling with attacker-controlled frames</p> <p>libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode libaom: libaom: arbitrary address write via SVC layer context OOB and cyclic refresh map pointer hijack libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id libaom: libaom: remote code execution via SVC layer context handling with attacker-controlled frames</p> https://cve.radiocsirt.org/vuln/rhsa-2026:30814 https://cve.radiocsirt.org/vuln/rlsa-2026:47104 <p><strong>Affected:</strong> Rocky Linux:9: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)</p> <p>* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)</p> <p>* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)</p> <p>* firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)</p> <p>* firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)</p> <p>* firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)</p> <p>* firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)</p> <p>* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)</p> <p>* firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)</p> <p>* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)</p> <p>* firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)</p> <p>* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)</p> <p>* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)</p> <p>* firefox: thunderbi…</p> <p><strong>Affected:</strong> Rocky Linux:9: firefox</p> <p>Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.</p> <p>Security Fix(es):</p> <p>* libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode (CVE-2026-56208)</p> <p>* firefox: thunderbird: Site isolation issue in the DOM: Navigation component (CVE-2026-15719)</p> <p>* firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component (CVE-2026-15718)</p> <p>* firefox: thunderbird: Mitigation bypass in the Enterprise Policies component (CVE-2026-16390)</p> <p>* firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component (CVE-2026-16350)</p> <p>* firefox: thunderbird: Information disclosure in the Storage: IndexedDB component (CVE-2026-16391)</p> <p>* firefox: thunderbird: Site isolation issue in the Networking: HTTP component (CVE-2026-16375)</p> <p>* firefox: thunderbird: Sandbox escape due to use-after-free in the Disability Access APIs component (CVE-2026-16356)</p> <p>* firefox: thunderbird: JIT miscompilation in the JavaScript: WebAssembly component (CVE-2026-16363)</p> <p>* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153 (CVE-2026-16412)</p> <p>* firefox: thunderbird: Same-origin policy bypass in the Networking: DNS component (CVE-2026-16381)</p> <p>* firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2026-16355)</p> <p>* firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13 (CVE-2026-16361)</p> <p>* firefox: thunderbi…</p> https://cve.radiocsirt.org/vuln/rlsa-2026:47104 https://cve.radiocsirt.org/vuln/suse-su-2026:22369-1 <p>Security update for libaom</p> <p>Security update for libaom</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22369-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56208 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: aom, Ubuntu:24.04:LTS: aom, Ubuntu:25.10: aom, Ubuntu:26.04:LTS: aom</p> <p>A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder&#39;s Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: aom, Ubuntu:24.04:LTS: aom, Ubuntu:25.10: aom, Ubuntu:26.04:LTS: aom</p> <p>A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder&#39;s Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when g_lag_in_frames is set to 1 or higher. This results in a 232-byte out-of-bounds write on every encoded frame after the second, corrupting adjacent heap objects. An attacker who can influence encoder configuration in a transcoding service or WebRTC session could exploit this to cause a denial of service (process crash) or potentially achieve code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56208 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2693 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux AI ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux AI ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2693