Dav1D

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-1580 Feb 19, 11:15 HIGH This Week

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Apple macOS Fedora +7

NVD

CVSS 3.1

8.8

EPSS

1.8%

CVE-2023-32570 May 10, 05:15 MEDIUM PATCH This Month

VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Denial Of Service Race Condition Fedora Dav1D Fedoraproject +1

NVD

CVSS 3.1

5.9

EPSS

0.7%

CVE-2024-1580

EPSS 2% CVSS 8.8

HIGH This Week

Buffer Overflow Integer Overflow Apple +9

NVD

CVE-2023-32570

EPSS 1% CVSS 5.9

MEDIUM PATCH This Month

Denial Of Service Race Condition Fedora +3

NVD