Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 427
Alerts This Week
Warning Icon 1 427

SUSE SVT-AV1 Important Buffer Overflow Memory Issues Vuln 2026-3224-1

suse
Calendar Grey July 24, 2026
Scroller Suse
An important update for SUSE addresses four issues in SVT-AV1, libyuv0 and libaom3 with significant security fixes.
A security update for SVT-AV1, libyuv0, and libaom3 addresses multiple vulnerabilities, allowing potential memory corruption and remote code execution, requiring updates for affect...

Summary

## This update for SVT-AV1, libyuv0, libaom3 fixes the following issues: * CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap- based buffer overflow and a process crash (bsc#1268650). * CVE-2026-56209: crafted video frames with specific Y-plane pixel values can lead to an arbitrary memory write (bsc#1268651). * CVE-2026-56210: missing bounds check on layer_id inputs can lead to an out- of-bounds heap read (bsc#1268653). * CVE-2026-56211: out-of-range spatial/temporal layer selection can lead to remote code execution (bsc#1268655). Bug fixes: * Add SVT-AV1, libyuv0, libaom3 to Basesystem, no source changes. (bsc#1263678). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE remote code execution important arbitrary memory write

References

* bsc#1263678

* bsc#1268242

* bsc#1268650

* bsc#1268651

* bsc#1268653

* bsc#1268655

Cross-

* CVE-2026-56208

* CVE-2026-56209

* CVE-2026-56210

* CVE-2026-56211

CVSS scores:

* CVE-2026-56208 ( SUSE ): 6.0

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-56208 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H

* CVE-2026-56208 ( NVD ): 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

* CVE-2026-56208 ( NVD ): 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

* CVE-2026-56209 ( SUSE ): 7.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-56209 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

* CVE-2026-56209 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:3224-1
Release Date: 2026-07-23T18:34:25Z
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE remote code execution important arbitrary memory write

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.