Red Hat Red Hat Enterprise Linux AI 3.4 for RHEL 9

4 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-56211fixed in 0:3.14.0-1.el9aiLibaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesHIGH 7.10.9 %
CVE-2026-56210fixed in 0:3.14.0-1.el9aiLibaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idHIGH 7.10.6 %
CVE-2026-56209fixed in 0:3.14.0-1.el9aiLibaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackHIGH 7.10.6 %
CVE-2026-56208Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modeHIGH 7.60.6 %