Lucene search

CVE-2024-1580

🗓️ 19 Feb 2024 00:00:00Reported by ubuntu.comType

Integer overflow in AV1 decoder, upgrade dav1d past 1.4.0

Reporter	Title	Published	Views	Family All 39
Debian	[SECURITY] [DSA 5686-1] dav1d security update	9 May 202414:47	–	debian
Tenable Nessus	Fedora 40 : dav1d (2024-12fcc689ac)	29 Apr 202400:00	–	nessus
Tenable Nessus	macOS 13.x < 13.6.6 (HT214095)	25 Mar 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dav1d (SUSE-SU-2024:0964-1)	23 Mar 202400:00	–	nessus
Tenable Nessus	Debian dsa-5686 : dav1d - security update	9 May 202400:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : dav1d (SUSE-SU-2024:0963-1)	23 Mar 202400:00	–	nessus
Tenable Nessus	macOS 14.x < 14.4.1 (HT214096)	25 Mar 202400:00	–	nessus
Tenable Nessus	FreeBSD : electron{27,28,29} -- multiple vulnerabilities (f90bf863-e43c-4db3-b5a8-d9603684657a)	18 Apr 202400:00	–	nessus
OSV	CVE-2024-1580	19 Feb 202411:15	–	osv
OSV	libdav1d-sys affected by dav1d AV1 decoder integer overflow	5 Apr 202415:42	–	osv

Source	Link
code	www.code.videolan.org/videolan/dav1d/-/releases/1.4.0
code	www.code.videolan.org/videolan/dav1d/-/blob/master/NEWS
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-1580
launchpad	www.launchpad.net/bugs/cve/CVE-2024-1580
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-1580

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	22.04	noarch	dav1d	any	UNKNOWN
ubuntu	24.04	noarch	dav1d	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Feb 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS35.9

EPSS0.001