Vulnerabilities of Red Hat Red Hat AI Inference Server 3.3

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-41523	vLLM is an inference and serving engine for large language models (LLMs)	7.5 High	Jun 22, 2026
CVE-2026-48746	vLLM is an inference and serving engine for large language models (LLMs)	9.1 Critical	Jun 22, 2026
CVE-2026-56210	Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id	7.1 High	Jun 19, 2026
CVE-2026-56211	Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames	7.1 High	Jun 19, 2026
CVE-2026-56208	Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode	7.6 High	Jun 19, 2026
CVE-2026-56209	Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack	7.1 High	Jun 19, 2026
CVE-2026-48818	Starlette is a lightweight ASGI framework/toolkit	7.5 High	Jun 17, 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Medium	Jun 2, 2026
CVE-2026-10118	Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication	7.8 High	Jun 1, 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 High	May 28, 2026
CVE-2026-48710	Exploited Kludex Starlette HTTP Request/Response Smuggling Vulnerability	6.5 Medium	May 26, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-37555	An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec	7.5 High	Apr 29, 2026
CVE-2026-40192	Pillow is a Python imaging library	8.7 High	Apr 15, 2026
CVE-2026-40164	jq is a command-line JSON processor	7.5 High	Apr 13, 2026
CVE-2026-39979	jq is a command-line JSON processor	6.9 Medium	Apr 13, 2026
CVE-2026-4786	Mitgation of CVE-2026-4519 was incomplete	7.0 High	Apr 13, 2026
CVE-2026-6100	Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a…	9.1 Critical	Apr 13, 2026
CVE-2026-4878	Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	6.7 Medium	Apr 9, 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Medium	Apr 8, 2026
CVE-2026-34588	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.6 High	Apr 6, 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 High	Apr 6, 2026
CVE-2026-35535	In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop…	7.4 High	Apr 3, 2026
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 High	Apr 2, 2026
CVE-2026-5201	Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image	7.5 High	Mar 31, 2026

Other Red Hat products