P4Verified

CVE-2026-100231: Red Hat Enterprise Linux 10 (exact versions not specified); +3 more affected products

CVE-2026-100231. CVSS 3.1 base score 6.1 (GitHub Advisory Database).

Affected technology

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · No privileges required · User interaction required

What an attacker can do

An attacker could exploit this by providing media with crafted metadata tags to an application that transcodes or remuxes to ASF format while preserving metadata, potentially causing a denial of service or limited memory corruption. Vendor/CNA’s CVSS 3.1 assessment (base score 6.1/10) rates confidentiality impact as none; integrity impact as low; availability impact as high.

Published 14-Oct-2026 15:58 UTC

CWE: CWE-787
CCR priority: 24.4 /100 (P4)
CVSS 3.1: 6.1 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H · GitHub Advisory Database
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-14 16:01:16.619248+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-14 15:56:36.793806+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-100231.html