151 matches found
ROOT-OS-ALPINE-318-CVE-2024-1580 CVE-2024-1580 in dav1d - Patched by Root
Root has patched CVE-2024-1580 in the dav1d package for Root:Alpine:3.18. Multiple fixed versions available...
Astra Linux – Vulnerability in dav1d
An integer overflow occurs in the dav1d AV1 decoder, which can happen when decoding videos with a large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading to a version later than 1.4.0 of dav1d...
ROOT-OS-DEBIAN-12-CVE-2023-32570 CVE-2023-32570 in dav1d - Patched by Root
Root has patched CVE-2023-32570 in the dav1d package for Root:Debian:12. Multiple fixed versions available...
vlc:vlc-demux-dec-libfuzzer-nuv: Crash in dav1d_ipred_dc_8bpc_avx2.s16
Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=5721703706853376 Project: vlc Fuzzing Engine: libFuzzer Fuzz Target: vlc-demux-dec-libfuzzer-nuv Job Type: libfuzzerubsanvlc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7973df364000...
vlc:vlc-demux-dec-libfuzzer-avi: Crash in dav1d_put_8tap_scaled_16bpc_avx2.vloop
Detailed Report: https://oss-fuzz.com/testcase?key=6551838609702912 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-avi Job Type: aflasanvlc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x78d0d8960000 Crash State: dav1dput8tapscaled16bpcavx2.vloop...
vlc:vlc-demux-dec-libfuzzer-nuv: Heap-buffer-overflow in dav1d_cdef_brow_8bpc
Detailed Report: https://oss-fuzz.com/testcase?key=4743949838516224 Project: vlc Fuzzing Engine: honggfuzz Fuzz Target: vlc-demux-dec-libfuzzer-nuv Job Type: honggfuzzasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7bb582964b00 Crash State: dav1dcdefbrow8bpc...
vlc:vlc-demux-dec-libfuzzer-nuv: Heap-buffer-overflow in dav1d_backup_ipred_edge_16bpc
Detailed Report: https://oss-fuzz.com/testcase?key=4643851439767552 Project: vlc Fuzzing Engine: honggfuzz Fuzz Target: vlc-demux-dec-libfuzzer-nuv Job Type: honggfuzzasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x7de28f824400 Crash State:...
vlc:vlc-demux-dec-libfuzzer-mp4: Heap-buffer-overflow in dav1d_prepare_intra_edges_8bpc
Detailed Report: https://oss-fuzz.com/testcase?key=4508621294862336 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7daa01f24780 Crash State: dav1dprepareintraedges8bpc...
vlc:vlc-demux-dec-libfuzzer-mp4: Heap-buffer-overflow in dav1d_decode_tile_sbrow
Project: https://github.com/videolan/vlc.git Detailed Report: https://oss-fuzz.com/testcase?key=6070174037114880 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-mp4 Job Type: aflasanvlc Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x74bd82a7e780...
[SECURITY] Fedora 42 Update: rust-gst-plugin-dav1d-0.13.7-2.fc42
GStreamer dav1d AV1 decoder Plugin...
[SECURITY] Fedora 43 Update: rust-gst-plugin-dav1d-0.14.0-3.fc43
GStreamer dav1d AV1 decoder Plugin...
CVE-2025-48592
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2025-201764
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48592
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48592
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-48592
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-427113482
In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
OESA-2025-2614 dav1d security update
dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness. Security Fixes: An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past...