ALT Linux Team

Package dav1d update in sisyphus on 2024-02-23

ALT-PU-2024-18443-1

Package dav1d updated to version 1.4.0-alt1 for branch sisyphus in task 341252.

Closed vulnerabilities

Published: 2024-07-01
Modified: 2026-01-20

BDU:2024-04901

Уязвимость декодера dav1d операционных систем iOS, iPadOS, visionOS, macOS, Fedora, браузера Safari, позволяющая нарушителю выполнить произвольный код

Severity: MEDIUM (5.9)Vector: AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
Severity: MEDIUM (5.5)Vector: AV:A/AC:H/Au:S/C:P/I:C/A:P
References:
Published: 2024-02-19
Modified: 2025-02-13

CVE-2024-1580

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Severity: HIGH (8.8)Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: 2.1.2
Back to top