Vulnerabilities of Red Hat Red Hat Enterprise Linux AI 3.3
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-41523 | vLLM is an inference and serving engine for large language models (LLMs) | 7.5 High | Jun 22, 2026 |
| CVE-2026-56210 | Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id | 7.1 High | Jun 19, 2026 |
| CVE-2026-56211 | Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames | 7.1 High | Jun 19, 2026 |
| CVE-2026-56208 | Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode | 7.6 High | Jun 19, 2026 |
| CVE-2026-56209 | Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack | 7.1 High | Jun 19, 2026 |
| CVE-2026-34993 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python | 6.4 Medium | Jun 2, 2026 |
| CVE-2026-42338 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript | 5.3 Medium | May 12, 2026 |
| CVE-2026-40192 | Pillow is a Python imaging library | 8.7 High | Apr 15, 2026 |
| CVE-2026-4786 | Mitgation of CVE-2026-4519 was incomplete | 7.0 High | Apr 13, 2026 |
| CVE-2026-6100 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a… | 9.1 Critical | Apr 13, 2026 |
| CVE-2026-39892 | cryptography has a buffer overflow if non-contiguous buffers were passed to APIs | 6.9 Medium | Apr 8, 2026 |
| CVE-2026-27893 | vLLM is an inference and serving engine for large language models (LLMs) | 8.8 High | Mar 26, 2026 |
| CVE-2026-4519 | The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for… | 7.0 High | Mar 20, 2026 |
| CVE-2026-30922 | pyasn1 is a generic ASN.1 library for Python | 7.5 High | Mar 18, 2026 |
| CVE-2026-32597 | PyJWT is a JSON Web Token implementation in Python | 7.5 High | Mar 12, 2026 |
| CVE-2026-25679 | url.Parse insufficiently validated the host/authority component and accepted some invalid URLs | 7.5 High | Mar 6, 2026 |
| CVE-2026-23490 | pyasn1 is a generic ASN.1 library for Python | 7.5 High | Jan 16, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433