{"schemaVersion":3,"id":"USN-8772-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"aom vulnerabilities\n\nIt was discovered that AOM incorrectly handled the first-pass statistics\nbuffer in Look-Ahead Processing (LAP) mode. An attacker could possibly use\nthis issue to cause a heap buffer overflow, leading to a denial of service\nor possibly execute arbitrary code. (CVE-2026-56208)\n\nIt was discovered that AOM incorrectly validated spatial and temporal\nlayer IDs in the SVC (Scalable Video Coding) encoder controls. An attacker\ncould possibly use this issue to write to an arbitrary memory address, read\nout-of-bounds heap memory, or execute arbitrary code. (CVE-2026-56209,\nCVE-2026-56210, CVE-2026-56211)","dates":{"published":"2026-09-16T09:29:07.000Z","modified":"2026-09-16T20:27:34.125Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"aom","name":"aom","label":"aom","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/aom","purlType":"deb","versions":[{"text":"< 3.3.0-1ubuntu0.1+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.8.2-2ubuntu0.2","noFixRecorded":false,"fixedIn":null},{"text":"< 3.13.1-2ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.0-1ubuntu0.1+esm1 | < 3.8.2-2ubuntu0.2 | < 3.13.1-2ubuntu0.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8772-1","label":"ubuntu.com/security/notices/USN-8772-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-56208","label":"ubuntu.com/security/CVE-2026-56208","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-56209","label":"ubuntu.com/security/CVE-2026-56209","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-56210","label":"ubuntu.com/security/CVE-2026-56210","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-56211","label":"ubuntu.com/security/CVE-2026-56211","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2026-56208","CVE-2026-56209","CVE-2026-56210","CVE-2026-56211"],"downstream":[],"duplicates":[],"related":["CVE-2026-56208","CVE-2026-56209","CVE-2026-56210","CVE-2026-56211"]},"timeline":[{"kind":"published","date":"2026-09-16T09:29:07.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-16T20:27:34.125Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:13:52.592Z","stale":false,"partial":false}}