Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-1580

Published: 19/02/2024 Updated: 27/03/2024

Vulnerability Summary

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Vulnerability Trend

Vendor Advisories

Debian CVElist Bug Report Logs: dav1d: CVE-2024-1580
Debian Bug report logs - #1064310 dav1d: CVE-2024-1580 Package: src:dav1d; Maintainer for src:dav1d is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 19 Feb 2024 21:39:02 UTC Severity: grave Tags: security, upstream Found in versio ...
Apple: macOS Sonoma 14.4.1
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: macOS Ventura 13.6.6
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: iOS 17.4.1 and iPadOS 17.4.1
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: iOS 16.7.7 and iPadOS 16.7.7
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: visionOS 1.1.1
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: Safari 17.4.1
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...

Mailing Lists

Full Disclosure: APPLE-SA-03-25-2024-2 macOS Sonoma 14.4.1
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-25-2024-2 macOS Sonoma 1441 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple Product S ...
Full Disclosure: APPLE-SA-03-25-2024-1 Safari 17.4.1
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-25-2024-1 Safari 1741 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple Product Securit ...
Full Disclosure: APPLE-SA-03-25-2024-3 macOS Ventura 13.6.6
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-25-2024-3 macOS Ventura 1366 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple Product ...
Full Disclosure: APPLE-SA-03-25-2024-4 iOS 17.4.1 and iPadOS 17.4.1
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-25-2024-4 iOS 1741 and iPadOS 1741 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple ...
Full Disclosure: APPLE-SA-03-25-2024-5 iOS 16.7.7 and iPadOS 16.7.7
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-25-2024-5 iOS 1677 and iPadOS 1677 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple ...
Full Disclosure: APPLE-SA-03-25-2024-6 visionOS 1.1.1
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-25-2024-6 visionOS 111 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple Product Securi ...

References

https://code.videolan.org/videolan/dav1d/-/releases/1.4.0https://code.videolan.org/videolan/dav1d/-/blob/master/NEWShttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EPMUNDMEBGESOJ2ZNCWYEAYOOEKNWOO/https://support.apple.com/kb/HT214098https://support.apple.com/kb/HT214097https://support.apple.com/kb/HT214095https://support.apple.com/kb/HT214093https://support.apple.com/kb/HT214096https://support.apple.com/kb/HT214094http://seclists.org/fulldisclosure/2024/Mar/41http://seclists.org/fulldisclosure/2024/Mar/36http://seclists.org/fulldisclosure/2024/Mar/38http://seclists.org/fulldisclosure/2024/Mar/37http://seclists.org/fulldisclosure/2024/Mar/40http://seclists.org/fulldisclosure/2024/Mar/39https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1064310https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook