Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-1580
HistoryFeb 19, 2024 - 11:15 a.m.

CVE-2024-1580

2024-02-1911:15:08
CWE-190
[email protected]
web.nvd.nist.gov
7
cve-2024-1580
memory corruption
video decoding

CVSS3

5.9

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

17.1%

JSON

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Related

apple 6
debian 1
cvelist 1
nessus 7
openvas 6
osv 4
mageia 1
veracode 1
fedora 1
cve 1
ubuntucve 1
alpinelinux 1
prion 1
vulnrichment 1
debiancve 1
freebsd 1
apple
apple
About the security content of macOS Sonoma 14.4.1
2024-03-25 00:00:00
About the security content of macOS Ventura 13.6.6
2024-03-25 00:00:00
About the security content of visionOS 1.1.1
2024-03-21 00:00:00
debian
debian
[SECURITY] [DSA 5686-1] dav1d security update
2024-05-09 14:47:00
cvelist
cvelist
CVE-2024-1580 Integer overflow in VideoLAN dav1d
2024-02-19 10:34:55
nessus
nessus
Fedora 40 : dav1d (2024-12fcc689ac)
2024-04-29 00:00:00
macOS 13.x < 13.6.6 (HT214095)
2024-03-25 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dav1d (SUSE-SU-2024:0964-1)
2024-03-23 00:00:00
openvas
openvas
Apple Safari Security Update (HT214094)
2024-03-28 00:00:00
Apple Mac OS X Security Update (HT214095)
2024-03-28 00:00:00
Mageia: Security Advisory (MGASA-2024-0111)
2024-04-09 00:00:00
osv
osv
CVE-2024-1580
2024-02-19 11:15:08
libdav1d-sys affected by dav1d AV1 decoder integer overflow
2024-04-05 15:42:39
dav1d - security update
2024-05-09 00:00:00
mageia
mageia
Updated dav1d packages fix security vulnerability
2024-04-06 01:26:33
veracode
veracode
Integer Overflow
2024-02-22 03:54:52
fedora
fedora
[SECURITY] Fedora 40 Update: dav1d-1.4.0-1.fc40
2024-03-23 00:45:13
cve
cve
CVE-2024-1580
2024-02-19 11:15:08
ubuntucve
ubuntucve
CVE-2024-1580
2024-02-19 00:00:00
alpinelinux
alpinelinux
CVE-2024-1580
2024-02-19 11:15:08
prion
prion
Integer overflow
2024-02-19 11:15:00
vulnrichment
vulnrichment
CVE-2024-1580 Integer overflow in VideoLAN dav1d
2024-02-19 10:34:55
debiancve
debiancve
CVE-2024-1580
2024-02-19 11:15:08
freebsd
freebsd
electron{27,28,29} -- multiple vulnerabilities
2024-04-16 00:00:00

CVSS3

5.9

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

17.1%

JSON
Related for NVD:CVE-2024-1580
apple6debian1cvelist1nessus7openvas6osv4mageia1veracode1fedora1cve1ubuntucve1alpinelinux1prion1vulnrichment1debiancve1freebsd1