Description
An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VideoLAN | dav1d | < 1.4.0 | 1.4.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | dav1d | 1.4.0-1 | — |
| Debian 13 | dav1d | 1.4.0-1 | — |
| Debian 12 | dav1d | 1.0.0-2+deb12u1 | DSA-5686-1 |
| Debian 11 | dav1d | 0.7.1-3+deb11u1 | DSA-5686-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | dav1d | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | dav1d | 0.9.2-150400.3.3.1 | SUSE-SU-2024:0964-1, SUSE-SU-2024:0963-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | dav1d | 1.0.0-150500.3.6.1 | SUSE-SU-2024:0964-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | dav1d | 1.3.0-r1 | — |
Advisories 6
- DSA-5686-1 dav1d - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2024:0964-1 Security update for dav1d SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0963-1 Security update for dav1d SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-0706 Apple Safari: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Nov 24, 2024
- WID-SEC-2024-0705 Apple macOS: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Nov 24, 2024
- WID-SEC-2024-0707 Apple iOS und iPadOS: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Nov 18, 2024
References
- https://code.videolan.org/videolan/dav1d/-/releases/1.4.0
- https://code.videolan.org/videolan/dav1d/-/blob/master/NEWS
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EPMUNDMEBGESOJ2ZNCWYEAYOOEKNWOO/
- https://support.apple.com/kb/HT214098
- https://support.apple.com/kb/HT214097
- https://support.apple.com/kb/HT214095
- https://support.apple.com/kb/HT214093
- https://support.apple.com/kb/HT214096
- https://support.apple.com/kb/HT214094
- http://seclists.org/fulldisclosure/2024/Mar/41
- http://seclists.org/fulldisclosure/2024/Mar/36
- http://seclists.org/fulldisclosure/2024/Mar/38
- http://seclists.org/fulldisclosure/2024/Mar/37
- http://seclists.org/fulldisclosure/2024/Mar/40
- http://seclists.org/fulldisclosure/2024/Mar/39