CVE-2024-1580: Integer Overflow or Wraparound

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d...

CVE-2024-1580

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d...

Security update for vlc (moderate)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2023:0365-1 Rating: moderate References: Cross-References: CVE-2022-37434 CVE-2023-5217 CVSS scores: CVE-2022-37434 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-37434 SUSE: 8.1...

dav1d: Denial of Service

Background dav1d is an AV1 decoder. Description In some circumstances, dav1d might treat an invalid frame as valid, resulting in a crash. Impact Malformed frame data can result in a denial of service. Workaround Users should avoid parsing untrusted video with dav1d. Resolution All dav1d users...

[SECURITY] Fedora 37 Update: dav1d-1.2.1-1.fc37

dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness...

Fedora: Security Advisory for dav1d (FEDORA-2023-9ea5d6e289)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: dav1d-1.2.1-1.fc38

dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness...

libaom:av1_dec_fuzzer: Heap-buffer-overflow in row_mt_worker_hook

Detailed Report: https://oss-fuzz.com/testcase?key=5555611524268032 Project: libaom Fuzzing Engine: honggfuzz Fuzz Target: av1decfuzzer Job Type: honggfuzzasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x613000000aa8 Crash State: rowmtworkerhook threadloop...

libaom:av1_dec_fuzzer: Heap-buffer-overflow in row_mt_worker_hook

Detailed Report: https://oss-fuzz.com/testcase?key=5313574883426304 Project: libaom Fuzzing Engine: honggfuzz Fuzz Target: av1decfuzzer Job Type: honggfuzzasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x613000000aa8 Crash State: rowmtworkerhook execute...

libaom:av1_dec_fuzzer: Crash in av1_dec_row_mt_dealloc

Detailed Report: https://oss-fuzz.com/testcase?key=5708384987381760 Project: libaom Fuzzing Engine: libFuzzer Fuzz Target: av1decfuzzer Job Type: libfuzzerubsanlibaom Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0007024c2ff8 Crash State: av1decrowmtdealloc av1decoderremove...

dav1d:dav1d_fuzzer_mt: Heap-buffer-overflow in dav1d_cdef_brow_8bpc

Project: https://code.videolan.org/videolan/dav1d.git Detailed Report: https://oss-fuzz.com/testcase?key=5387199655313408 Project: dav1d Fuzzing Engine: libFuzzer Fuzz Target: dav1dfuzzermt Job Type: libfuzzerasandav1d Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address:...

gpac:fuzz_parse: Stack-use-after-return in on_aom_av1_eos

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5111254667624448 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzparse Job Type: aflasangpac Platform Id: linux Crash Type: Stack-use-after-return WRITE 4 Crash Address: 0x7f3ff0361038 Crash State:...

kimageformats:kimgio_avif_fuzzer: Use-of-uninitialized-value in av1_highbd_iwht4x4_16_add_c

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=4834088829714432 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioaviffuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...