Red Hat Red Hat AI Inference Server 3.2

• CVE-2026-15588 Medium 5.3 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering 0.5%
• CVE-2026-16118 High 7.1 Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c 0.3%
• CVE-2026-58015 Medium 5.9 Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive 0.8%
• CVE-2026-58014 High 7.3 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" 0.6%
• CVE-2026-58013 Medium 6.5 Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" 0.5%
• CVE-2026-58012 Medium 6.5 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() 0.5%
• CVE-2026-58011 Medium 6.5 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime 0.5%
• CVE-2026-58010 Medium 6.5 Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() 0.5%
• CVE-2026-56211 High 7.1 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames 0.9%
• CVE-2026-56210 High 7.1 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id 0.6%
• CVE-2026-56208 High 7.6 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode 0.6%
• CVE-2026-56209 High 7.1 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack 0.6%
• CVE-2026-42009 High 7.5 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 1.3%
• CVE-2026-42010 High 7.1 Gnutls: gnutls: authentication bypass via nul character in username 1.1%
• CVE-2026-33846 High 7.5 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 1.3%
• CVE-2026-33845 High 7.5 Gnutls: gnutls: denial of service via dtls zero-length fragment 2.1%
• CVE-2026-4878 Medium 6.7 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 0.2%
• CVE-2026-5201 High 7.5 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image 1.1%
• CVE-2026-5121 High 7.5 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 1.1%
• CVE-2026-4775 High 7.8 Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing 0.6%
• CVE-2026-4424 High 7.5 Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing 1.3%
• CVE-2026-4111 High 7.5 Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive 0.7%
• CVE-2025-14831 Medium 5.3 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 0.7%
• CVE-2025-14512 Medium 6.5 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow 0.6%
• CVE-2025-14087 Medium 5.6 Glib: glib: buffer underflow in gvariant parser leads to heap corruption 0.8%
• CVE-2025-9900 High 8.8 Libtiff: libtiff write-what-where 1.0%
• CVE-2025-5318 Medium 5.4 Libssh: out-of-bounds read in sftp_handle() 1.9%
• CVE-2025-6170 Low 2.5 Libxml2: stack buffer overflow in xmllint interactive shell command handling 0.3%
• CVE-2023-39329 Medium 6.5 Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c 0.6%
• CVE-2023-39327 Medium 4.3 Openjpeg: malicious files can cause the program to enter a large loop 0.6%
• CVE-2023-52356 High 7.5 Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service 2.5%
• CVE-2023-52355 High 7.5 Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom 1.8%