{"schema":"vulnpedia.research/1","cve":"CVE-2026-64835","references":[{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659","tags":["issue-tracking","Issue Tracking","Patch","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-07-28T01:06:05.429Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-07-28T01:06:05.429Z","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659"},{"source":"nvd","sourceId":"CVE-2026-64835","modified":"2026-10-24T15:10:00.190","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659"},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23659"}]},{"url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e","tags":["patch","Patch","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-07-28T01:06:05.429Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-07-28T01:06:05.429Z","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e"},{"source":"nvd","sourceId":"CVE-2026-64835","modified":"2026-10-24T15:10:00.190","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e"},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1836ef96846937a6cc2443698a693104f5c0b21e"}]},{"url":"https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder","tags":["third-party-advisory","Third Party Advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-07-28T01:06:05.429Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-07-28T01:06:05.429Z","url":"https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"},{"source":"nvd","sourceId":"CVE-2026-64835","modified":"2026-10-24T15:10:00.190","url":"https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://www.vulncheck.com/advisories/ffmpeg-out-of-bounds-memory-access-in-adx-audio-decoder"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-64835","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-64835"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2506195","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2506195"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64835","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-64835"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64835"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:52832","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:52832"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:74089","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:74089"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:52833","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:52833"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:51180","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:51180"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:74459","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:74459"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71394","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71394"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:61628","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:61628"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:61627","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:61627"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:61629","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:61629"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:68696","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:68696"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:68699","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:68699"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:68698","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:68698"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:68697","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:68697"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:76041","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:76041"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:76043","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:76043"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:74460","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:74460"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:81128","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:81128"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:74462","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:74462"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:80739","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:80739"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:80740","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:80740"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:74463","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:74463"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:80757","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:80757"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:74461","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:74461"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:80760","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:80760"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:74458","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:74458"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:80735","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:80735"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:73987","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:73987"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69929","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69929"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69933","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69933"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69934","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69934"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69930","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69930"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69935","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69935"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69932","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69932"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69931","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69931"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:69927","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:69927"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84734","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84734"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:60520","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:60520"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71393","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71393"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71399","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71399"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71396","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71396"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71395","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71395"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71392","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71392"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71401","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71401"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71397","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71397"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:71398","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://access.redhat.com/errata/RHSA-2026:71398"}]},{"source":"euvd","sourceId":"EUVD-2026-47760","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-47760","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-47760","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-47760"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"9Base-RHELAI-3.0:ffmpeg-0:6.1.6-3.el9ai.src","product":"ffmpeg-0:6.1.6-3.el9ai.src as a component of Red Hat Enterprise Linux AI 3.0 for RHEL 9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Backport CVE fixes from upstream","url":"https://access.redhat.com/errata/RHSA-2026:52832"}],"purl":"pkg:rpm/redhat/ffmpeg@6.1.6-3.el9ai?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"9Base-RHELAI-3.0:libavcodec-free-rhai-debuginfo-0:6.1.6-9.el9ai.s390x","product":"libavcodec-free-rhai-debuginfo-0:6.1.6-9.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.0 for RHEL 9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:74089"}],"purl":"pkg:rpm/redhat/libavcodec-free-rhai-debuginfo@6.1.6-9.el9ai?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"9Base-RHELAI-3.0:libavfilter-free-rhai-devel-0:6.1.6-9.el9ai.ppc64le","product":"libavfilter-free-rhai-devel-0:6.1.6-9.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.0 for RHEL 9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:74089"}],"purl":"pkg:rpm/redhat/libavfilter-free-rhai-devel@6.1.6-9.el9ai?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"9Base-RHELAI-3.0:libpostproc-free-rhai-0:6.1.6-9.el9ai.ppc64le","product":"libpostproc-free-rhai-0:6.1.6-9.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.0 for RHEL 9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:74089"}],"purl":"pkg:rpm/redhat/libpostproc-free-rhai@6.1.6-9.el9ai?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"9Base-RHELAI-3.0:libswscale-free-rhai-debuginfo-0:6.1.6-9.el9ai.ppc64le","product":"libswscale-free-rhai-debuginfo-0:6.1.6-9.el9ai.ppc64le as a component of Red Hat Enterprise Linux AI 3.0 for RHEL 9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:74089"}],"purl":"pkg:rpm/redhat/libswscale-free-rhai-debuginfo@6.1.6-9.el9ai?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"9Base-RHELAI-3.2:libavdevice-free-rhai-devel-0:6.1.6-3.el9ai.x86_64","product":"libavdevice-free-rhai-devel-0:6.1.6-3.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.2 for RHEL 9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Backport fixes from upstream","url":"https://access.redhat.com/errata/RHSA-2026:52833"}],"purl":"pkg:rpm/redhat/libavdevice-free-rhai-devel@6.1.6-3.el9ai?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"9Base-RHELAI-3.2:libswresample-free-rhai-debuginfo-0:6.1.6-3.el9ai.x86_64","product":"libswresample-free-rhai-debuginfo-0:6.1.6-3.el9ai.x86_64 as a component of Red Hat Enterprise Linux AI 3.2 for RHEL 9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Backport fixes from upstream","url":"https://access.redhat.com/errata/RHSA-2026:52833"}],"purl":"pkg:rpm/redhat/libswresample-free-rhai-debuginfo@6.1.6-3.el9ai?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"9Base-RHELAI-3.3:libavdevice-free-rhai-debuginfo-0:6.1.6-3.el9ai.s390x","product":"libavdevice-free-rhai-debuginfo-0:6.1.6-3.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.3 for RHEL 9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Backporting CVE Fixes from upstream\n\nffmpeg-6.1.6-3.el9ai","url":"https://access.redhat.com/errata/RHSA-2026:51180"}],"purl":"pkg:rpm/redhat/libavdevice-free-rhai-debuginfo@6.1.6-3.el9ai?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"9Base-RHELAI-3.3:libswresample-free-rhai-0:6.1.6-3.el9ai.s390x","product":"libswresample-free-rhai-0:6.1.6-3.el9ai.s390x as a component of Red Hat Enterprise Linux AI 3.3 for RHEL 9","status":"fixed","remediations":[{"category":"vendor_fix","details":"Backporting CVE Fixes from upstream\n\nffmpeg-6.1.6-3.el9ai","url":"https://access.redhat.com/errata/RHSA-2026:51180"}],"purl":"pkg:rpm/redhat/libswresample-free-rhai@6.1.6-3.el9ai?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.2:registry.redhat.io/rhai/base-image-rocm-rhel9@sha256:07476932142451399c908fa867c37e481f50ef9381a06b7cd94bc8a5d9870c7b_amd64","product":"registry.redhat.io/rhai/base-image-rocm-rhel9@sha256:07476932142451399c908fa867c37e481f50ef9381a06b7cd94bc8a5d9870c7b_amd64 as a component of Red Hat OpenShift AI 3.2","status":"fixed","remediations":[{"category":"vendor_fix","details":"For more information visit https://access.redhat.com/errata/RHSA-2026:74459","url":"https://access.redhat.com/errata/RHSA-2026:74459"}],"purl":"pkg:oci/base-image-rocm-rhel9@sha256%3A07476932142451399c908fa867c37e481f50ef9381a06b7cd94bc8a5d9870c7b?arch=amd64&repository_url=registry.redhat.io/rhai/base-image-rocm-rhel9&tag=1790703506","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.5:registry.redhat.io/rhai/base-image-tpu-rhel9@sha256:2df8527a738c3183d24f72f33b9460e9f0a173727486b69a718551dd7afc849f_amd64","product":"registry.redhat.io/rhai/base-image-tpu-rhel9@sha256:2df8527a738c3183d24f72f33b9460e9f0a173727486b69a718551dd7afc849f_amd64 as a component of Red Hat OpenShift AI 3.5","status":"fixed","remediations":[{"category":"vendor_fix","details":"For more information visit https://access.redhat.com/errata/RHSA-2026:71394","url":"https://access.redhat.com/errata/RHSA-2026:71394"}],"purl":"pkg:oci/base-image-tpu-rhel9@sha256%3A2df8527a738c3183d24f72f33b9460e9f0a173727486b69a718551dd7afc849f?arch=amd64&repository_url=registry.redhat.io/rhai/base-image-tpu-rhel9&tag=1788197492","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_ai_inference_server:rhaii/model-opt-cuda-rhel9","product":"rhaii/model-opt-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/model-opt-cuda-rhel9?repository_url=registry.redhat.io/rhaii/model-opt-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","product":"rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","product":"rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cuda-rhel9?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_ai_inference_server:rhaii/vllm-neuron-rhel9","product":"rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/vllm-neuron-rhel9?repository_url=registry.redhat.io/rhaii/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_ai_inference_server:rhaii/vllm-rocm-rhel9","product":"rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-rocm-rhel9?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_ai_inference_server:rhaii/vllm-spyre-rhel9","product":"rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-spyre-rhel9?repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_ai_inference_server:rhaii/vllm-tpu-rhel9","product":"rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/vllm-tpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","product":"rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","product":"rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/vllm-tpu-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/bootc-gaudi-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_openshift_ai_(rhoai):rhai/base-image-rocm-7.0-rhel9","product":"rhai/base-image-rocm-7.0-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/base-image-rocm-7.0-rhel9?repository_url=registry.redhat.io/rhai/base-image-rocm-7.0-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:6a3e7d0dcb52e8ea9e4f73344ff216b880dadf61f03a0551b7e97fe383098368_arm64","product":"registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:6a3e7d0dcb52e8ea9e4f73344ff216b880dadf61f03a0551b7e97fe383098368_arm64 as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-built-in-detector-rhel9@sha256%3A6a3e7d0dcb52e8ea9e4f73344ff216b880dadf61f03a0551b7e97fe383098368?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-built-in-detector-rhel9&tag=1789573032","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-mlserver-rhel9@sha256:283785367ad6ebfca2d7cd516e18b6588b975802b01a02e6e18f137466e30ba0_arm64","product":"registry.redhat.io/rhoai/odh-mlserver-rhel9@sha256:283785367ad6ebfca2d7cd516e18b6588b975802b01a02e6e18f137466e30ba0_arm64 as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mlserver-rhel9@sha256%3A283785367ad6ebfca2d7cd516e18b6588b975802b01a02e6e18f137466e30ba0?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-mlserver-rhel9&tag=1789121365","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.3:registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9@sha256:c27da769f64622cc443883d6f5d9076136ae31fd95a3f077ef00f7fc50b1632d_amd64","product":"registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9@sha256:c27da769f64622cc443883d6f5d9076136ae31fd95a3f077ef00f7fc50b1632d_amd64 as a component of Red Hat OpenShift AI 3.3","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-trustyai-service-operator-rhel9@sha256%3Ac27da769f64622cc443883d6f5d9076136ae31fd95a3f077ef00f7fc50b1632d?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9&tag=1790136613","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:5fa73ac9806750dba8388a9b3087f44d3cc82f015e620defd84f2adfe0301d50_ppc64le","product":"registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:5fa73ac9806750dba8388a9b3087f44d3cc82f015e620defd84f2adfe0301d50_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-data-science-pipelines-operator-controller-rhel9@sha256%3A5fa73ac9806750dba8388a9b3087f44d3cc82f015e620defd84f2adfe0301d50?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9&tag=1787002057","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kube-auth-proxy-rhel9@sha256:47307461df1fa8a20ef41230b90e2d3293a9884d37394d2328150949e6ee1c75_arm64","product":"registry.redhat.io/rhoai/odh-kube-auth-proxy-rhel9@sha256:47307461df1fa8a20ef41230b90e2d3293a9884d37394d2328150949e6ee1c75_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kube-auth-proxy-rhel9@sha256%3A47307461df1fa8a20ef41230b90e2d3293a9884d37394d2328150949e6ee1c75?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-kube-auth-proxy-rhel9&tag=1787102977","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:5ce4b827b855448b33742e770b3acf76d3172c28c3eceb94b171dd45d33f2d1a_amd64","product":"registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:5ce4b827b855448b33742e770b3acf76d3172c28c3eceb94b171dd45d33f2d1a_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ml-pipelines-launcher-rhel9@sha256%3A5ce4b827b855448b33742e770b3acf76d3172c28c3eceb94b171dd45d33f2d1a?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9&tag=1787331889","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:37df8c9bbb5dd8460ad7b6f6a37b6a17a45b90151e5831462acd4b85d407fcae_arm64","product":"registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:37df8c9bbb5dd8460ad7b6f6a37b6a17a45b90151e5831462acd4b85d407fcae_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-controller-rhel9@sha256%3A37df8c9bbb5dd8460ad7b6f6a37b6a17a45b90151e5831462acd4b85d407fcae?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-model-controller-rhel9&tag=1790958159","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:992b4a099bc21bdf1e7f12173cf1d4939f19a739efaad905bb3c9802323cdb47_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:992b4a099bc21bdf1e7f12173cf1d4939f19a739efaad905bb3c9802323cdb47_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256%3A992b4a099bc21bdf1e7f12173cf1d4939f19a739efaad905bb3c9802323cdb47?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9&tag=1791828837","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9@sha256:677c628aff6b4891251647bc9b699695d33ce6af671f15afbcda23b5c4401563_amd64","product":"registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9@sha256:677c628aff6b4891251647bc9b699695d33ce6af671f15afbcda23b5c4401563_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-trustyai-service-operator-rhel9@sha256%3A677c628aff6b4891251647bc9b699695d33ce6af671f15afbcda23b5c4401563?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-trustyai-service-operator-rhel9&tag=1791292352","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]},{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","product":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-64835","modified":"2026-10-19T11:24:55+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-64835.json"}]}],"vendorCoverage":{"total":1447,"shown":32,"omitted":1415,"source":"redhat"}}