« Back to list

Aomedia

Aomedia Libaom: vulnerabilities and CVEs

Aomedia Libaom has 5 published vulnerabilities, 4 of them in the last 12 months. 1 are rated critical and 0 are listed by CISA as actively exploited.

CVEs5
Last 12 months4
Critical1
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-56211High (7.1)0.88%—Jun 19, 2026
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to…
CVE-2026-56210High (7.1)0.58%—Jun 19, 2026
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a…
CVE-2026-56209High (7.1)0.64%—Jun 19, 2026
An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an…
CVE-2026-56208High (7.6)0.42%—Jun 19, 2026
A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode causes the first-pass stats ring buffer wrap-around guard to…
CVE-2024-5171Critical (10)1.3%—Jun 5, 2024
Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

🎯 How it gets exploited (ATT&CK techniques)

  1. T1203 Exploitation for Client Execution4
  2. T1499.004 Application or System Exploitation2
  3. T1005 Data from Local System1
  4. T1059 Command and Scripting Interpreter1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Aomedia