What’s Vulnerable › Vulnerabilities

CVE-2024-1580: Integer overflow in VideoLAN dav1d

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-19 · updated 2026-06-17
• Weakness: CWE-190

Description

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Affected products

• Apple iPadOS: before 16.7.7; from 17.0 before 17.4.1 — fixed in 16.7.7, 17.4.1
• Apple Iphone Os: before 16.7.7; from 17.0 before 17.4.1 — fixed in 16.7.7, 17.4.1
• Apple macOS: from 13.0 before 13.6.6; from 14.0 before 14.4.1 — fixed in 13.6.6, 14.4.1
• Apple Safari: before 17.4.1 — fixed in 17.4.1
• Apple visionOS: before 1.1.1 — fixed in 1.1.1
• Fedoraproject Fedora: 40
• VideoLAN dav1d: before 1.4.0 — fixed in 1.4.0

How to fix

Upgrade to a fixed version: Apple iPadOS 16.7.7, 17.4.1; Apple Iphone Os 16.7.7, 17.4.1; Apple macOS 13.6.6, 14.4.1; Apple Safari 17.4.1; Apple visionOS 1.1.1; VideoLAN dav1d 1.4.0. Check the vendor advisory for mitigations.

References

• http://seclists.org/fulldisclosure/2024/Mar/36
• http://seclists.org/fulldisclosure/2024/Mar/37
• http://seclists.org/fulldisclosure/2024/Mar/38
• http://seclists.org/fulldisclosure/2024/Mar/39
• http://seclists.org/fulldisclosure/2024/Mar/40
• http://seclists.org/fulldisclosure/2024/Mar/41
• https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS
• https://code.videolan.org/videolan/dav1d/-/releases/1.4.0
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EPMUNDMEBGESOJ2ZNCWYEAYOOEKNWOO/
• https://support.apple.com/kb/HT214093
• https://support.apple.com/kb/HT214094
• https://support.apple.com/kb/HT214095

Get alerted when CVE-2024-1580 or the next vulnerability affects your stack