Dav1D

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-1580 HIGH This Week

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Integer Overflow Buffer Overflow Dav1D Safari Ipados +4

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2023-32570 MEDIUM PATCH This Month

VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Race Condition Denial Of Service Dav1D Fedora

NVD

CVSS 3.1

5.9

EPSS

0.7%

CVE-2024-1580

EPSS 2% CVSS 8.8

HIGH This Week

Integer Overflow Buffer Overflow Dav1D +6

NVD

CVE-2023-32570

EPSS 1% CVSS 5.9

MEDIUM PATCH This Month

Race Condition Denial Of Service Dav1D +1

NVD