CVE-2024-1580

—

CVSS 3.1

8.8 high

EPSS

2%p78

Published

Feb 19, 2024 (Feb 19, 2024)

Modified

Jun 17, 2026

Description

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Vendors: videolan apple fedoraproject
Products: dav1d, safari, ipados, iphone os, macos, visionos, fedora
Weakness: CWE-190
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.