Ai Inference Server (Redhat) - vulnerabilities (CVEs)

114 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2026-08-10. Vendor: Redhat.

CVEs of Ai Inference Server

CVE-2026-18621 - CVSS 7.6 (high), 2026-08-10: A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo…
CVE-2026-15588 - CVSS 5.3 (medium), 2026-07-20: A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to…
CVE-2026-16118 - CVSS 7.1 (high), 2026-07-17: A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian…
CVE-2026-58015 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context…
CVE-2026-58014 - CVSS 8.6 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with…
CVE-2026-58013 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a…
CVE-2026-58012 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change…
CVE-2026-58011 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid…
CVE-2026-58010 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment…
CVE-2026-14164 - CVSS 7.5 (high), 2026-06-30: A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain…
CVE-2026-58049 - CVSS 8.8 (high), 2026-06-28: FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and…
CVE-2026-54513 - CVSS 8.1 (high), 2026-06-23: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and…
CVE-2026-41523 - CVSS 7.5 (high), 2026-06-22: vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based security check in vLLM's activation function…
CVE-2026-48746 - CVSS 9.1 (critical), 2026-06-22: vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust…
CVE-2026-56340 - CVSS 8.8 (high), 2026-06-20: vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor…
CVE-2026-56211 - CVSS 7.1 (high), 2026-06-19: A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC…
CVE-2026-56210 - CVSS 7.1 (high), 2026-06-19: A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video…
CVE-2026-56209 - CVSS 7.1 (high), 2026-06-19: An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video…
CVE-2026-56208 - CVSS 7.6 (high), 2026-06-19: A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode…
CVE-2026-8461 - CVSS 8.8 (high), 2026-06-18: An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be…
CVE-2026-48818 - CVSS 7.5 (high), 2026-06-17: Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Windows is vulnerable to SSRF. An UNC path such as…
CVE-2026-12491 - CVSS 4.8 (medium), 2026-06-17: A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata,…
CVE-2026-5497 - CVSS 7.5 (high), 2026-06-11: vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the…
CVE-2026-5241 - CVSS 9.6 (critical), 2026-06-03: A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute…
CVE-2026-34993 - CVSS 7.3 (high), 2026-06-02: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, using ``CookieJar.load()`` with untrusted input may…
CVE-2026-49121 - CVSS 9.8 (critical), 2026-06-01: AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within…
CVE-2026-8643 - CVSS 8 (high), 2026-06-01: pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory,…
CVE-2026-10118 - CVSS 7.8 (high), 2026-06-01: A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered,…
CVE-2026-45292 - CVSS 7.5 (high), 2026-05-28: opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to…
CVE-2026-48526 - CVSS 7.4 (high), 2026-05-28: PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC…
CVE-2026-48710 - CVSS 6.5 (medium), 2026-05-26: Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct…
CVE-2026-42009 - CVSS 7.5 (high), 2026-05-18: A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator…
CVE-2026-44513 - CVSS 8.8 (high), 2026-05-14: Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, a trust_remote_code bypass in DiffusionPipeline.from_pretrained allows arbitrary…
CVE-2026-44484 - CVSS 9.8 (critical), 2026-05-14: PyTorch Lightning is a deep learning framework to pretrain and finetune AI models. Versions 2.6.2 and 2.6.2 have introduced functionality consistent with a…
CVE-2026-42561 - CVSS 7.5 (high), 2026-05-13: Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header…
CVE-2026-44432 - CVSS 8.9 (high), 2026-05-13: urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1)…
CVE-2026-42010 - CVSS 9.8 (critical), 2026-05-07: A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character…
CVE-2026-43868 - CVSS 7.5 (high), 2026-05-05: Memory Allocation with Excessive Size Value vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade…
CVE-2026-43869 - CVSS 7.3 (high), 2026-05-05: Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended…
CVE-2026-33846 - CVSS 7.5 (high), 2026-05-04: A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where…
CVE-2026-33845 - CVSS 9.1 (critical), 2026-04-30: A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and…
CVE-2026-37555 - CVSS 8.2 (high), 2026-04-29: An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235)…
CVE-2026-41605 - CVSS 7.7 (high), 2026-04-28: Integer Overflow or Wraparound vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version…
CVE-2026-41604 - CVSS 8.2 (high), 2026-04-28: Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which…
CVE-2026-41607 - CVSS 9.1 (critical), 2026-04-28: Out-of-bounds Read vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which…
CVE-2026-41602 - CVSS 7.5 (high), 2026-04-28: Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.…
CVE-2026-41606 - CVSS 7.5 (high), 2026-04-28: Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0,…
CVE-2025-48431 - CVSS 7.5 (high), 2026-04-28: Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings. This issue affects Apache Thrift: before 0.23.0. Users are…
CVE-2026-40192 - CVSS 8.7 (high), 2026-04-15: Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making…
CVE-2026-6385 - CVSS 6.5 (medium), 2026-04-15: A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious…
CVE-2026-40164 - CVSS 7.5 (high), 2026-04-14: jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed…
CVE-2026-39979 - CVSS 8.2 (high), 2026-04-13: jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer…
CVE-2026-4786 - CVSS 7.1 (high), 2026-04-13: Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()"…
CVE-2026-6100 - CVSS 9.1 (critical), 2026-04-13: Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a…
CVE-2026-4878 - CVSS 7 (high), 2026-04-09: A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function.…
CVE-2026-39892 - CVSS 9.8 (critical), 2026-04-08: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous…
CVE-2026-32283 - CVSS 7.5 (high), 2026-04-08: If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled…
CVE-2026-32280 - CVSS 7.5 (high), 2026-04-08: During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in…
CVE-2026-33810 - CVSS 8.8 (high), 2026-04-08: When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different…
CVE-2026-34982 - CVSS 8.2 (high), 2026-04-06: Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user…
CVE-2026-34756 - CVSS 6.5 (medium), 2026-04-06: vLLM is an inference and serving engine for large language models (LLMs). From 0.1.0 to before 0.19.0, a Denial of Service vulnerability exists in the vLLM…
CVE-2026-34755 - CVSS 6.5 (medium), 2026-04-06: vLLM is an inference and serving engine for large language models (LLMs). From 0.7.0 to before 0.19.0, the VideoMediaIO.load_base64() method at…
CVE-2026-34588 - CVSS 8.8 (high), 2026-04-06: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to…
CVE-2026-35535 - CVSS 7.8 (high), 2026-04-03: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal…
CVE-2026-35385 - CVSS 8.1 (high), 2026-04-02: In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is…
CVE-2026-5201 - CVSS 7.5 (high), 2026-03-31: A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color…
CVE-2026-5121 - CVSS 9.8 (critical), 2026-03-30: A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker…
CVE-2026-27893 - CVSS 8.8 (high), 2026-03-27: vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.18.0, two model implementation…
CVE-2026-33412 - CVSS 7.3 (high), 2026-03-24: Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like…
CVE-2026-4775 - CVSS 7.8 (high), 2026-03-24: A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by…
CVE-2026-33186 - CVSS 9.1 (critical), 2026-03-20: gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the…
CVE-2026-4519 - CVSS 7.1 (high), 2026-03-20: The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects…
CVE-2026-4424 - CVSS 7.5 (high), 2026-03-19: A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS…
CVE-2026-27135 - CVSS 7.5 (high), 2026-03-18: nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data…
CVE-2026-26740 - CVSS 8.2 (high), 2026-03-18: Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing…
CVE-2026-30922 - CVSS 7.5 (high), 2026-03-18: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled…
CVE-2026-32981 - CVSS 8.7 (high), 2026-03-17: A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1. Due to improper validation and sanitization…
CVE-2026-4111 - CVSS 7.5 (high), 2026-03-13: A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a…
CVE-2026-32597 - CVSS 7.5 (high), 2026-03-13: PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11.…
CVE-2026-3497 - CVSS 8.2 (high), 2026-03-12: Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux…
CVE-2026-28356 - CVSS 7.5 (high), 2026-03-12: multipart is a fast multipart/form-data parser for python. Prior to 1.2.2, 1.3.1 and 1.4.0-dev, the parse_options_header() function in multipart.py uses a…
CVE-2026-23868 - CVSS 7 (high), 2026-03-10: Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to…
CVE-2026-25960 - CVSS 9.8 (critical), 2026-03-09: vLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in the…
CVE-2026-25048 - CVSS 8.7 (high), 2026-03-05: xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32, the multi-level nested syntax caused…
CVE-2026-27622 - CVSS 8.4 (high), 2026-03-03: OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In…
CVE-2025-13327 - CVSS 6.3 (medium), 2026-02-27: A flaw was found in uv. This vulnerability allows an attacker to execute malicious code during package resolution or installation via specially crafted ZIP…
CVE-2026-2447 - CVSS 8.8 (high), 2026-02-16: Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and…
CVE-2026-25990 - CVSS 8.6 (high), 2026-02-11: Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This…
CVE-2025-69872 - CVSS 9.8 (critical), 2026-02-11: DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve…
CVE-2026-25506 - CVSS 7.8 (high), 2026-02-10: MUNGE is an authentication service for creating and validating user credentials. From 0.5 to 0.5.17, local attacker can exploit a buffer overflow…
CVE-2026-25646 - CVSS 8.3 (high), 2026-02-10: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55,…
CVE-2025-14831 - CVSS 5.3 (medium), 2026-02-09: A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via…
CVE-2026-22778 - CVSS 9.8 (critical), 2026-02-02: vLLM is an inference and serving engine for large language models (LLMs). From 0.8.3 to before 0.14.1, when an invalid image is sent to vLLM's multimodal…
CVE-2026-24779 - CVSS 7.1 (high), 2026-01-27: vLLM is an inference and serving engine for large language models (LLMs). Prior to version 0.14.1, a Server-Side Request Forgery (SSRF) vulnerability exists…
CVE-2025-15467 - CVSS 9.8 (critical), 2026-01-27: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact…
CVE-2026-24486 - CVSS 8.6 (high), 2026-01-27: Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default…
CVE-2026-0994 - CVSS 8.2 (high), 2026-01-23: A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when…
CVE-2026-1260 - CVSS 8.5 (high), 2026-01-22: Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.
CVE-2026-24049 - CVSS 7.1 (high), 2026-01-22: wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable…
CVE-2026-22807 - CVSS 9.8 (critical), 2026-01-21: vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.14.0, vLLM loads Hugging Face…