THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-56209 (HIGH 7.1) — An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafte

[NVD] CVE-2026-56209 (HIGH 7.1) — An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafte

lownvdPublished 2026-06-19

CVE-2026-56209 CVSS: 7.1 HIGH Published: 2026-06-19T17:16:30.427

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an attacker to inject an arbitrary pointer into the cyclic refresh map field via crafted image pixel values. The encoder then writes approxim

Indicators of compromise

CVE-2026-56209cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-56209