Approved changes feed: RSS · Atom

cpe:2.3:a:videolan:dav1d:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVideolan (b1ef3618-afd2-52df-be05-50fdbdda8d58)
ProductDav1D (ab6974f9-d596-599a-8145-c45c6b0881ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1580 vulnerable 2026-06-08 06:27:13.614454 Integer overflow in VideoLAN dav1d
MEDIUM (5.9)
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
Published: 2024-02-19T10:34:55.113Z
Updated: 2025-02-13T17:32:17.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32570 vulnerable 2026-06-08 06:04:46.522650 Details available
VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.
Published: 2023-05-10T00:00:00.000Z
Updated: 2025-01-28T15:42:41.962Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.