Skip to content
OpenAdvisories
Medium DSA-5686-1 1 CVE

dav1d - security update

Published May 9, 2024 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 11 dav1d 0.7.1-3+deb11u1
Debian · 12 dav1d 1.0.0-2+deb12u1

Vulnerabilities 1

  • Medium 5.9

    Integer overflow in VideoLAN dav1d

    An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.