CVE-2024-1580

2024-02-1911:15:08

Debian Security Bug Tracker

security-tracker.debian.org

integer overflow

dav1d

av1 decoder

upgrade

memory corruption

video decoding

frame size

memory security

unix

5.9 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

0.0005 Low

EPSS

Percentile

17.2%

JSON

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

OSVersionArchitecturePackageVersionFilename
Debian12alldav1d< 1.0.0-2+deb12u1dav1d_1.0.0-2+deb12u1_all.deb
Debian11alldav1d< 0.7.1-3+deb11u1dav1d_0.7.1-3+deb11u1_all.deb
Debian999alldav1d< 1.4.0-1dav1d_1.4.0-1_all.deb
Debian13alldav1d< 1.4.0-1dav1d_1.4.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	dav1d	< 1.0.0-2+deb12u1	dav1d_1.0.0-2+deb12u1_all.deb
Debian	11	all	dav1d	< 0.7.1-3+deb11u1	dav1d_0.7.1-3+deb11u1_all.deb
Debian	999	all	dav1d	< 1.4.0-1	dav1d_1.4.0-1_all.deb
Debian	13	all	dav1d	< 1.4.0-1	dav1d_1.4.0-1_all.deb