Lucene search
Gentoo FoundationMGASA-2024-0111HistoryApr 06, 2024 - 1:26 a.m.
Updated dav1d packages fix security vulnerability
2024-04-0601:26:33
Gentoo Foundation
advisories.mageia.org
14
dav1d
security vulnerability
integer overflow
av1 decoder
memory corruption
cve-2024-1580
unix
5.9 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
7.7 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. (CVE-2024-1580)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | dav1d | < 1.2.1-1.1 | dav1d-1.2.1-1.1.mga9 |
Related
alpinelinux
alpinelinux
CVE-2024-1580
2024-02-19 11:15:08
nessus
nessus
macOS 13.x < 13.6.6 Multiple Vulnerabilities (HT214095)
2024-03-25 00:00:00
Fedora 40 : dav1d (2024-12fcc689ac)
2024-04-29 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT214095)
2024-03-28 00:00:00
Apple Safari Security Update (HT214094)
2024-03-28 00:00:00
Mageia: Security Advisory (MGASA-2024-0111)
2024-04-09 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: dav1d-1.4.0-1.fc40
2024-03-23 00:45:13
apple
apple
About the security content of iOS 17.4.1 and iPadOS 17.4.1
2024-03-21 00:00:00
About the security content of visionOS 1.1.1
2024-03-21 00:00:00
About the security content of macOS Ventura 13.6.6
2024-03-25 00:00:00
veracode
veracode
Integer Overflow
2024-02-22 03:54:52
osv
osv
CVE-2024-1580
2024-02-19 11:15:08
libdav1d-sys affected by dav1d AV1 decoder integer overflow
2024-04-05 15:42:39
dav1d - security update
2024-05-09 00:00:00
debian
debian
[SECURITY] [DSA 5686-1] dav1d security update
2024-05-09 14:47:00
cvelist
cvelist
CVE-2024-1580 Integer overflow in VideoLAN dav1d
2024-02-19 10:34:55
ubuntucve
ubuntucve
CVE-2024-1580
2024-02-19 00:00:00
cve
cve
CVE-2024-1580
2024-02-19 11:15:08
debiancve
debiancve
CVE-2024-1580
2024-02-19 11:15:08
prion
prion
Integer overflow
2024-02-19 11:15:00
nvd
nvd
CVE-2024-1580
2024-02-19 11:15:08
freebsd
freebsd
electron{27,28,29} -- multiple vulnerabilities
2024-04-16 00:00:00
5.9 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
7.7 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%
Related for MGASA-2024-0111