An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5686 advisory.

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-12fcc689ac advisory.

    Update to version 1.4.0.

    This version addresses CVE-2024-1580 (see RHBZ#2264939).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f90bf863-e43c-4db3-b5a8-d9603684657a advisory.

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

  - Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote     attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI     gestures. (Chromium security severity: High) (CVE-2024-3157)

  - Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3515)

  - Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-3516)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.4.1. It is, therefore, affected by a vulnerability:

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6.6. It is, therefore, affected by a vulnerability:

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 17.4.1. It is, therefore, affected by a vulnerability.

The version of Apple iOS running on the mobile device is prior to 16.7.7. It is, therefore, affected by a vulnerability.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0964-1 advisory.

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0963-1 advisory.

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
195227	Debian dsa-5686 : dav1d - security update	Nessus	Debian Local Security Checks	medium
194594	Fedora 40 : dav1d (2024-12fcc689ac)	Nessus	Fedora Local Security Checks	medium
193498	FreeBSD : electron{27,28,29} -- multiple vulnerabilities (f90bf863-e43c-4db3-b5a8-d9603684657a)	Nessus	FreeBSD Local Security Checks	critical
192531	macOS 14.x < 14.4.1 (HT214096)	Nessus	MacOS X Local Security Checks	medium
192530	macOS 13.x < 13.6.6 (HT214095)	Nessus	MacOS X Local Security Checks	medium
192529	Apple iOS < 17.4.1 Vulnerability (HT214097)	Nessus	Mobile Devices	medium
192527	Apple iOS < 16.7.7 Vulnerability (HT214098)	Nessus	Mobile Devices	medium
192489	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dav1d (SUSE-SU-2024:0964-1)	Nessus	SuSE Local Security Checks	medium
192485	SUSE SLED15 / SLES15 Security Update : dav1d (SUSE-SU-2024:0963-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2024-1580

medium

Tenable Plugins

medium

medium

critical

medium

medium

medium

medium

medium

medium