Vulnerabilities of Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-96889	Librsvg: use-after-free when xml includes have duplicated entities	7.8 High	Sep 23, 2026
CVE-2026-87742	A flaw was found in quarkus-websockets-next	7.5 High	Sep 17, 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 High	Sep 17, 2026
CVE-2026-18393	A flaw was found in FFmpeg	5.4 Medium	Aug 28, 2026
CVE-2026-13676	fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs	7.5 High	Jun 29, 2026
CVE-2026-58049	FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before…	8.6 High	Jun 28, 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 High	Jun 23, 2026
CVE-2026-41523	vLLM is an inference and serving engine for large language models (LLMs)	7.5 High	Jun 22, 2026
CVE-2026-48746	vLLM is an inference and serving engine for large language models (LLMs)	9.1 Critical	Jun 22, 2026
CVE-2026-56340	vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing	8.7 High	Jun 20, 2026
CVE-2026-56210	Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id	7.1 High	Jun 19, 2026
CVE-2026-56211	Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames	7.1 High	Jun 19, 2026
CVE-2026-56208	Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode	7.6 High	Jun 19, 2026
CVE-2026-56209	Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack	7.1 High	Jun 19, 2026
CVE-2026-12706	A use-after-free vulnerability was found in FFmpeg's RASC video decoder	6.5 Medium	Jun 19, 2026
CVE-2026-8461	An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows…	8.8 High	Jun 18, 2026
CVE-2026-48818	Starlette is a lightweight ASGI framework/toolkit	7.5 High	Jun 17, 2026
CVE-2026-12491	A flaw was found in vLLM, an open-source library for large language model inference	4.8 Medium	Jun 17, 2026
CVE-2026-48779	ws is an open source WebSocket client and server for Node.js	7.5 High	Jun 16, 2026
CVE-2026-12143	form-data is a library for creating readable multipart/form-data streams	8.7 High	Jun 12, 2026
CVE-2026-45833	A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated…	9.4 Critical	Jun 12, 2026
CVE-2026-45832	All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the…	8.8 High	Jun 12, 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-45830	A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated…	8.8 High	Jun 12, 2026

Other Red Hat products