CVE-2024-1580

CVE-2024-1580: an integer overflow in the dav1d AV1 decoder can cause memory corruption when decoding large-frame videos. Upgrading past 1.4.0 is recommended. Debian reports fixes in bullseye 0.7.1-3+deb11u1 and bookworm 1.0.0-2+deb12u1. Apple advisories link CVE-2024-1580 to out-of-bounds write ...

CVE-2023-32570

CVE-2023-32570 affects VideoLAN dav1d before 1.2.0. A race condition in thread_task.c related to dav1d_decode_frame_exit can lead to an application crash. Public advisories show the fix being delivered in 1.2.0+ (Fedora/SUSE advisories note upgrading to 1.2.1 or newer). Affected product: dav1d (A...