Ubuntu.comUB:CVE-2024-1580CVE-2024-1580
5.9 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
7.5 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%
An integer overflow in dav1d AV1 decoder that can occur when decoding
videos with large frame size. This can lead to memory corruption within the
AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
Related
5.9 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
7.5 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.2%