GHSA-mc39-h54g-pvw6
Suggest an improvement- Source
- https://github.com/advisories/GHSA-mc39-h54g-pvw6
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/04/GHSA-mc39-h54g-pvw6/GHSA-mc39-h54g-pvw6.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-mc39-h54g-pvw6
- Aliases
- Published
- 2024-04-05T15:42:39Z
- Modified
- 2024-04-11T16:41:43.597984Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L CVSS Calculator
- Summary
- libdav1d-sys affected by dav1d AV1 decoder integer overflow
- Details
-
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading to version 0.7.0 of libdav1d-sys, which includes dav1d 1.4.0.
- Database specific
{ "nvd_published_at": null, "cwe_ids": [ "CWE-190" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-04-05T15:42:39Z" }- References
Affected packages
crates.io / libdav1d-sys
Package
- Name
- libdav1d-sys
- View open source insights on deps.dev
- Purl
- pkg:cargo/libdav1d-sys