debian/dav1d vulnerabilities

Latest debian/dav1d CVEs

Newest publication first

1. DSA-5686-1 dav1d - security update

   Published 2024-05-09

   Unknown

2. CVE-2024-1580 Integer overflow in VideoLAN dav1d

   Published 2024-02-19

   High·CVSS 8.8 EPSS 1.8%

   An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

3. CVE-2023-32570 VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

   Published 2023-05-10

   Medium·CVSS 5.9 EPSS 0.75%

   VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.