{"id":"CVE-2024-1580","aliases":["ALPINE-CVE-2024-1580","BELL-CVE-2024-1580","DEBIAN-CVE-2024-1580","DSA-5686-1","EUVD-2024-17324","GHSA-3p7f-4r2q-wxmm","MGASA-2024-0111","OESA-2025-2614","ROOT-OS-ALPINE-318-CVE-2024-1580","SUSE-SU-2024:0963-1","SUSE-SU-2024:0964-1","UBUNTU-CVE-2024-1580","openSUSE-SU-2024:13703-1"],"status":"published","title":"Integer overflow in VideoLAN dav1d","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01835,"percentile":0.79078,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2024-02-19T10:34:55Z","modified":"2026-11-02T12:00:42Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"dav1d","fixed_in":["1.3.0-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"dav1d","fixed_in":["1.4.0-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"dav1d","fixed_in":["1.4.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"dav1d","fixed_in":["1.0.0-2+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"dav1d","fixed_in":["1.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dav1d","fixed_in":["1.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"dav1d","fixed_in":["0.7.1-3+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"dav1d","fixed_in":["1.2.1-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"dav1d","fixed_in":["0.5.2-4.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"dav1d","fixed_in":["0.5.2-4.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"dav1d","fixed_in":["0.5.2-4.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"dav1d","fixed_in":["0.5.2-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"dav1d","fixed_in":["0.5.2-4.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"dav1d","fixed_in":["0.5.2-3.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"dav1d","fixed_in":["1.2.1-r00072","1.2.1-r00071","1.2.1-r00073","1.2.1-r00074","1.2.1-r00075","1.2.1-r00076"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.18","package":"rootio-dav1d","fixed_in":["1.2.1-r00072","1.2.1-r00071","1.2.1-r00073","1.2.1-r00074","1.2.1-r00075","1.2.1-r00076"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"dav1d","fixed_in":["0.9.2-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"dav1d","fixed_in":["1.0.0-150500.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"dav1d","fixed_in":["1.0.0-150500.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"dav1d","fixed_in":["1.0.0-150500.3.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0-r2"},{"fixed":"1.4.0-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0-r2"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0-r2"},{"fixed":"1.4.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-2+deb12u1"}]}],"versions":["1.0.0-2"]},{"source":"osv","ecosystem":"Debian:13","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.1-3+deb11u1"}]}],"versions":["0.7.1-3"]},{"source":"osv","ecosystem":"Debian:12","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-2+deb12u1"}]}],"versions":["1.0.0-2"]},{"source":"osv","ecosystem":"Mageia:9","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-4.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-4.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-4.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-4.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-3.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-r00072"},{"fixed":"1.2.1-r00071"},{"fixed":"1.2.1-r00073"},{"fixed":"1.2.1-r00074"},{"fixed":"1.2.1-r00075"},{"fixed":"1.2.1-r00076"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.18","package":"rootio-dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-r00072"},{"fixed":"1.2.1-r00071"},{"fixed":"1.2.1-r00073"},{"fixed":"1.2.1-r00074"},{"fixed":"1.2.1-r00075"},{"fixed":"1.2.1-r00076"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.2-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150500.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150500.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-150500.3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"dav1d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.1-3","0.9.2-1"]}],"products":[{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"visionos"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"videolan","product":"dav1d"}],"references":[{"url":"https://code.videolan.org/videolan/dav1d/-/releases/1.4.0","tags":["x_transferred","Release Notes","advisory","report"]},{"url":"https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS","tags":["x_transferred","Release Notes","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EPMUNDMEBGESOJ2ZNCWYEAYOOEKNWOO/","tags":["x_transferred","Mailing List","article"]},{"url":"https://support.apple.com/kb/HT214098","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT214097","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT214095","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT214093","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT214096","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT214094","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/41","tags":["x_transferred","Mailing List","article"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/36","tags":["x_transferred","Mailing List","article"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/38","tags":["x_transferred","Mailing List","article"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/37","tags":["x_transferred","Mailing List","article"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/40","tags":["x_transferred","Mailing List","article"]},{"url":"http://seclists.org/fulldisclosure/2024/Mar/39","tags":["x_transferred","Mailing List","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1580","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EPMUNDMEBGESOJ2ZNCWYEAYOOEKNWOO"},{"url":"https://github.com/advisories/GHSA-3p7f-4r2q-wxmm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-1580","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-1580","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-1580","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0111.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33014","tags":["report"]},{"url":"https://lwn.net/Articles/966589/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2614","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240963-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1220100","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-1580","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240964-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-1580","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-1580","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-1580","title":"Integer overflow in VideoLAN dav1d","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.","status":"published","published":"2024-02-19T10:34:55.113Z","modified":"2025-02-13T17:32:17.584Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:34:18.597034Z"}],"euvd":[{"id":"EUVD-2024-17324","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.","status":"published","published":"2024-02-19T10:34:55Z","modified":"2025-02-13T17:32:17Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium"}],"updated_at":"2026-11-03T00:03:47.607822Z"}],"ghsa":[{"id":"GHSA-3p7f-4r2q-wxmm","title":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame...","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.\n\n\n\n","status":"published","published":"2024-02-19T12:30:37Z","modified":"2026-03-14T05:07:43Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:06:37.566427Z"}],"nvd":[{"id":"CVE-2024-1580","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.","status":"published","published":"2024-02-19T11:15:08.817Z","modified":"2026-06-17T07:04:34.387Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:09:37.655131Z"}],"osv":[{"id":"ALPINE-CVE-2024-1580","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.","status":"published","published":"2024-02-19T11:15:08.817Z","modified":"2026-11-02T11:17:50.064337023Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2024-1580","status":"published","published":"2024-02-20T05:57:20.33278Z","modified":"2026-09-06T07:15:17.759407383Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2024-1580","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.","status":"published","published":"2024-02-19T11:15:08.817Z","modified":"2026-04-16T04:35:02.823701377Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:37.917085Z"},{"id":"DEBIAN-CVE-2024-1580","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.","status":"published","published":"2024-02-19T11:15:08.817Z","modified":"2026-11-02T12:00:42.083173266Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"OESA-2025-2614","title":"dav1d security update","description":"dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness.\r\n\r\nSecurity Fix(es):\n\nAn integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.(CVE-2024-1580)","status":"published","published":"2025-10-31T11:09:44Z","modified":"2026-08-18T01:19:18.362303921Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"ROOT-OS-ALPINE-318-CVE-2024-1580","title":"CVE-2024-1580 in dav1d - Patched by Root","description":"Root has patched CVE-2024-1580 in the dav1d package for Root:Alpine:3.18. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:28:18Z","modified":"2026-09-29T10:15:41.401036263Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"UBUNTU-CVE-2024-1580","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.","status":"published","published":"2024-02-19T11:15:00Z","modified":"2026-04-22T14:38:25.550097Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"DSA-5686-1","title":"dav1d - security update","status":"published","published":"2024-05-09T00:00:00Z","modified":"2026-03-09T02:10:37.13898Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0111","title":"Updated dav1d packages fix security vulnerability","description":"An integer overflow in dav1d AV1 decoder that can occur when decoding\nvideos with large frame size. This can lead to memory corruption within\nthe AV1 decoder. (CVE-2024-1580)\n","status":"published","published":"2024-04-05T22:26:33Z","modified":"2026-04-16T04:43:49.167770166Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13703-1","title":"dav1d-1.4.0-2.1 on GA media","description":"These are all security issues fixed in the dav1d-1.4.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:32:30.011885Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2024:0963-1","title":"Security update for dav1d","description":"This update for dav1d fixes the following issues:\n\n- CVE-2024-1580: Fixed tile_start_off calculations for extremely large frame sizes (bsc#1220100).\n","status":"published","published":"2024-03-21T16:19:43Z","modified":"2026-02-04T02:35:39.593265Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0964-1","title":"Security update for dav1d","description":"This update for dav1d fixes the following issues:\n\n- CVE-2024-1580: Fixed tile_start_off calculations for extremely large frame sizes (bsc#1220100).\n","status":"published","published":"2024-03-21T16:19:59Z","modified":"2026-02-04T04:38:06.039559Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}