CVE-2024-1580 Integer overflow in VideoLAN dav1d

Medium 5.9 Published 19 Feb 2024 Updated 13 Feb 2025

An integer overflow in the dav1d AV1 decoder allows attackers to cause memory corruption and potential code execution by providing specially crafted video files.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2024-1580?

CVE-2024-1580 is a medium-severity vulnerability in Apple Ipados, published on 19 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Weakness: CWE-190

Which versions are affected by CVE-2024-1580?

It affects 7 products.

Linux distribution packages (4)

`dav1d` SUSE:Linux Enterprise Module for Basesystem 15 SP5	All versions	`0.9.2-150400.3.3.1`
`dav1d` SUSE:Linux Enterprise Module for Desktop Applications 15 SP5	All versions	`1.0.0-150500.3.6.1`
`dav1d` SUSE:Linux Enterprise Module for Package Hub 15 SP5	All versions	`1.0.0-150500.3.6.1`
`dav1d` openSUSE:Leap 15.5	All versions	`1.0.0-150500.3.6.1`

Products include Apple Ipados, Apple Iphone Os, Apple Macos, Apple Safari, Apple Visionos, Fedoraproject Fedora and 1 more.

How do I fix CVE-2024-1580?

Upgrade to a fixed version.

Is CVE-2024-1580 being exploited?

There is no known exploitation of CVE-2024-1580 in the wild and no public exploit code.

All Apple Ipados vulnerabilities

Sources

Also known as ALPINE-CVE-2024-1580, BELL-CVE-2024-1580, DEBIAN-CVE-2024-1580, DSA-5686-1, GHSA-3p7f-4r2q-wxmm, MGASA-2024-0111 and 6 more.