NetSight
IP …
medium5.9

CVE-2024-1580

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size.

Impact

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Affected products

VendorProductAffected versions
VideolanDav1d
before 1.4.0
AppleSafari
before 17.4.1
AppleIpados
before 16.7.7
from 17.0 before 17.4.1
AppleIphone Os
before 16.7.7
from 17.0 before 17.4.1
AppleMacos
from 13.0 before 13.6.6
from 14.0 before 14.4.1
AppleVisionos
before 1.1.1
FedoraprojectFedora
Version 40

Weakness classification

CWE-190

References