CVE-2024-1580

{"id": "CVE-2024-1580", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve-coordination@google.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 1.2}]}, "published": "2024-02-19T11:15:08.817", "references": [{"url": "http://seclists.org/fulldisclosure/2024/Mar/36", "source": "cve-coordination@google.com"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/37", "source": "cve-coordination@google.com"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/38", "source": "cve-coordination@google.com"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/39", "source": "cve-coordination@google.com"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/40", "source": "cve-coordination@google.com"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/41", "source": "cve-coordination@google.com"}, {"url": "https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS", "source": "cve-coordination@google.com"}, {"url": "https://code.videolan.org/videolan/dav1d/-/releases/1.4.0", "source": "cve-coordination@google.com"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EPMUNDMEBGESOJ2ZNCWYEAYOOEKNWOO/", "source": "cve-coordination@google.com"}, {"url": "https://support.apple.com/kb/HT214093", "source": "cve-coordination@google.com"}, {"url": "https://support.apple.com/kb/HT214094", "source": "cve-coordination@google.com"}, {"url": "https://support.apple.com/kb/HT214095", "source": "cve-coordination@google.com"}, {"url": "https://support.apple.com/kb/HT214096", "source": "cve-coordination@google.com"}, {"url": "https://support.apple.com/kb/HT214097", "source": "cve-coordination@google.com"}, {"url": "https://support.apple.com/kb/HT214098", "source": "cve-coordination@google.com"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/36", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/37", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/38", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/39", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/40", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2024/Mar/41", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://code.videolan.org/videolan/dav1d/-/releases/1.4.0", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EPMUNDMEBGESOJ2ZNCWYEAYOOEKNWOO/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/kb/HT214093", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/kb/HT214094", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/kb/HT214095", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/kb/HT214096", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/kb/HT214097", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/kb/HT214098", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cve-coordination@google.com", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.\n\n\n\n"}, {"lang": "es", "value": "Un desbordamiento de enteros en el decodificador dav1d AV1 que puede ocurrir al decodificar videos con un tama\u00f1o de cuadro grande. Esto puede provocar da\u00f1os en la memoria del decodificador AV1. Recomendamos actualizar la versi\u00f3n anterior 1.4.0 de dav1d."}], "lastModified": "2024-11-21T08:50:52.910", "sourceIdentifier": "cve-coordination@google.com"}