Videolan Dav1D vulnerabilities

2 vulnerabilities

Known vulnerabilities in Videolan Dav1D, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2024-1580alpinedav1d+14
EPSS score
1.84%
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.5.9CVE-2023-32570debiandav1d+6
EPSS score
0.74%
VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.