Lucene search
+L

6 matches found

OSV
OSV
•added 2024/04/05 3:42 p.m.•46 views

GHSA-MC39-H54G-PVW6 libdav1d-sys affected by dav1d AV1 decoder integer overflow

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading to version 0.7.0 of libdav1d-sys, which includes dav1d 1.4.0...

5.9CVSS7.2AI score
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2024/04/05 3:42 p.m.•8 views

emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MC39-H54G-PVW6...

5.4AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/04/05 3:42 p.m.•35 views

libdav1d-sys affected by dav1d AV1 decoder integer overflow

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading to version 0.7.0 of libdav1d-sys, which includes dav1d 1.4.0...

8.8CVSS7.6AI score0.01835EPSS
SaveExploits0References3Affected Software1
vulnersOsv
vulnersOsv
•added 2024/02/19 12:00 p.m.•9 views

emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0016...

5.4AI score
SaveExploits0
RustSec
RustSec
•added 2024/02/19 12:00 p.m.•14 views

dav1d AV1 decoder integer overflow

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading to version 0.7.0 of libdav1d-sys, which includes dav1d 1.4.0...

8.8CVSS7.6AI score0.01835EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/19 12:00 a.m.•8 views

PT-2024-4402

Name of the Vulnerable Software and Affected Versions dav1d versions prior to 1.4.0 libdav1d-sys versions prior to 0.7.0 CoreMedia and WebRTC in Apple devices affected versions not specified Description The issue is related to an integer overflow in the dav1d AV1 decoder that can occur when...

8.8CVSS8.1AI score0.01835EPSS
SaveExploits0References94
Rows per page
Query Builder