VULNERABILITY INTELLIGENCE
CVE-2024-1580
CVSS score5.9 MEDIUM
EPSS probability1.84%
CISA KEVNot currently listed
Published2024-02-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
Description
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
Weakness classification
- cve-coordination@google.com: CWE-190
- nvd@nist.gov: CWE-190
Primary references
- cve-coordination@google.com — Mailing List
- cve-coordination@google.com — Mailing List
- cve-coordination@google.com — Mailing List
- cve-coordination@google.com — Mailing List
- cve-coordination@google.com — Mailing List
- cve-coordination@google.com — Mailing List
- cve-coordination@google.com — Release Notes
- cve-coordination@google.com — Release Notes
- cve-coordination@google.com — Mailing List
- cve-coordination@google.com — Third Party Advisory
- cve-coordination@google.com — Third Party Advisory
- cve-coordination@google.com — Third Party Advisory