CVE-2026-5673: redhat enterprise_linux Out-of-bounds Read
Vulnerability summary
CVE-2026-5673 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in redhat enterprise_linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 06-04-2026PublishedVulnerability first disclosed.
- 01-05-2026Last modifiedVulnerability information updated.
Description
A flaw was found in libtheora. This heap-based out-of-bounds read vulnerability exists within the AVI (Audio Video Interleave) parser, specifically in the avi_parse_input_file() function. A local attacker could exploit this by tricking a user into opening a specially crafted AVI file containing a truncated header sub-chunk. This could lead to a denial-of-service (application crash) or potentially leak sensitive information from the heap.
CVSS metrics
4 scores · 4 sources · 1 version- CVE.orgCNA5.6MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
-0.02 pp
From 0.18% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundTheora
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Ubuntu3 products
- ascAll versions (No fix recorded)
- mkvtoolnixAll versions (No fix recorded)
- ogmripAll versions (No fix recorded)
Debian1 product
- libtheoraAll versions (No fix recorded)
Redhat1 product
- enterprise_linuxEOL6.0 | 7.0 | 8.0 | 9.0 | 10.0
Xiph1 product
- theorana
4 vendors · 6 products
