VYPR

dav1d

by VideoLAN

CVEs (2)

  • CVE-2024-1580MedFeb 19, 2024
    risk 0.38cvss 5.9epss 0.02

    An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

  • CVE-2023-32570MedMay 10, 2023
    risk 0.38cvss 5.9epss 0.01

    VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.