CVE-2024-1580: Integer overflow in VideoLAN dav1d
First published: Mon Feb 19 2024(Updated: )
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
Credit: cve-coordination@google.com Nick Galloway Google Project ZeroNick Galloway Google Project ZeroNick Galloway Google Project ZeroNick Galloway Google Project ZeroNick Galloway Google Project Zero
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS | <14.4.1 | 14.4.1 |
| Apple Mobile Safari | <17.4.1 | 17.4.1 |
| Apple iOS, iPadOS, and watchOS | <16.7.7 | 16.7.7 |
| Apple iOS, iPadOS, and watchOS | <16.7.7 | 16.7.7 |
| Apple iOS, iPadOS, and watchOS | <17.4.1 | 17.4.1 |
| Apple iOS, iPadOS, and watchOS | <17.4.1 | 17.4.1 |
| visionOS | <1.1.1 | 1.1.1 |
| macOS Ventura | <13.6.6 | 13.6.6 |
| libdav1d | <1.4.0 | |
| Apple Mobile Safari | <17.4.1 | |
| Apple iOS, iPadOS, and watchOS | <16.7.7 | |
| Apple iOS, iPadOS, and watchOS | >=17.0<17.4.1 | |
| iStyle @cosme iPhone OS | <16.7.7 | |
| iStyle @cosme iPhone OS | >=17.0<17.4.1 | |
| Apple iOS and macOS | >=13.0<13.6.6 | |
| Apple iOS and macOS | >=14.0<14.4.1 | |
| visionOS | <1.1.1 | |
| Fedora | =40 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT214098 (Advisory)
- https://support.apple.com/en-us/HT214093 (Advisory)
- https://support.apple.com/en-us/HT214097 (Advisory)
- https://support.apple.com/en-us/HT214094 (Advisory)
- https://code.videolan.org/videolan/dav1d/-/releases/1.4.0
- https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EPMUNDMEBGESOJ2ZNCWYEAYOOEKNWOO/
- https://support.apple.com/kb/HT214098
- https://support.apple.com/kb/HT214097
- https://support.apple.com/kb/HT214095
- https://support.apple.com/kb/HT214093
- https://support.apple.com/kb/HT214096
- https://support.apple.com/kb/HT214094
- http://seclists.org/fulldisclosure/2024/Mar/41
- http://seclists.org/fulldisclosure/2024/Mar/36
- http://seclists.org/fulldisclosure/2024/Mar/38
- http://seclists.org/fulldisclosure/2024/Mar/37
- http://seclists.org/fulldisclosure/2024/Mar/40
- http://seclists.org/fulldisclosure/2024/Mar/39
- https://support.apple.com/en-us/HT214096 (Advisory)
- https://support.apple.com/en-us/HT214095 (Advisory)
- https://support.apple.com/en-us/120892 (Advisory)
- https://support.apple.com/en-us/120888 (Advisory)
- https://support.apple.com/en-us/120890 (Advisory)
- https://support.apple.com/en-us/120891 (Advisory)
- https://support.apple.com/en-us/120889 (Advisory)
Parent vulnerabilities
(Appears in the following advisories)
Frequently Asked Questions
What is the severity of CVE-2024-1580?
CVE-2024-1580 has been classified as a high-severity vulnerability due to potential memory corruption issues.
How do I fix CVE-2024-1580?
To fix CVE-2024-1580, you should upgrade to versions 1.4.0 or later of dav1d and ensure your Apple devices are updated to the recommended versions.
What products are affected by CVE-2024-1580?
CVE-2024-1580 affects various Apple products including iOS, iPadOS, Safari, and macOS versions prior to the specified remedies.
What type of vulnerability is CVE-2024-1580?
CVE-2024-1580 is an integer overflow vulnerability in the dav1d AV1 decoder.
What happens if I do not update my software for CVE-2024-1580?
If you do not update your software for CVE-2024-1580, you risk memory corruption which could lead to application crashes or data breaches.
- agent/title
- agent/first-publish-date
- agent/type
- agent/weakness
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/trending
- agent/source
- collector/apple-support
- source/Apple
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/severity
- agent/references
- agent/last-modified-date
- agent/description
- agent/event
- alias/CVE-2024-1580
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/apple
- canonical/apple macos
- canonical/apple mobile safari
- canonical/apple ios, ipados, and watchos
- canonical/visionos
- canonical/macos ventura
- vendor/videolan
- canonical/libdav1d
- version/apple ios, ipados, and watchos/17.0
- canonical/istyle @cosme iphone os
- version/istyle @cosme iphone os/17.0
- canonical/apple ios and macos
- version/apple ios and macos/13.0
- version/apple ios and macos/14.0
- vendor/fedoraproject
- canonical/fedora
- version/fedora/40