网安资讯详情 - SecLens 情报雷达

网安资讯，一网打尽。汇集权威漏洞通告与行业要闻，结合分组浏览、智能过滤、RSS订阅 和 Webhook 推送，多通道拓展您的安全情报视野。

CVE-2026-56210

来源： alibaba_cloud_linux_cve · 发布时间 2026-07-23 16:07 (UTC+08:00) · 抓取时间 2026-07-23 16:10 (UTC+08:00)

原文链接

摘要

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an out-of-bounds heap read of approximately 40,728 bytes when computing a layer context array index. An attacker who can influence SVC encoder parameters in a network-facing service could exploit this for information disclosure (heap content leak) or denial of service (segmentation fault from hitting unmapped memory).

标签

扩展字段

{
  "cve_id": "CVE-2026-56210",
  "raw_pub_date": "Thu, 23 Jul 2026 16:07:46 +0800"
}