An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote NewStart CGSL host, running version MAIN 7.02, has dav1d packages installed that are affected by a vulnerability:

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0971 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-1580:
    An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5686 advisory.

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-12fcc689ac advisory.

    Update to version 1.4.0.

    This version addresses CVE-2024-1580 (see RHBZ#2264939).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f90bf863-e43c-4db3-b5a8-d9603684657a advisory.

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

  - Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote     attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI     gestures. (Chromium security severity: High) (CVE-2024-3157)

  - Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (Chromium security severity: High) (CVE-2024-3515)

  - Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)     (CVE-2024-3516)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.4.1. It is, therefore, affected by a vulnerability:

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6.6. It is, therefore, affected by a vulnerability:

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This     can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 17.4.1. It is, therefore, affected by a vulnerability.

The version of Apple iOS running on the mobile device is prior to 16.7.7. It is, therefore, affected by a vulnerability.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0964-1 advisory.

    - CVE-2024-1580: Fixed tile_start_off calculations for extremely large frame sizes (bsc#1220100).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:0963-1 advisory.

    - CVE-2024-1580: Fixed tile_start_off calculations for extremely large frame sizes (bsc#1220100).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This
    can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
    (CVE-2024-1580)

ID	Name	Product	Family	Type	Severity
256212	Linux Distros Unpatched Vulnerability : CVE-2024-1580	Nessus	Misc.	Local	high
242723	NewStart CGSL MAIN 7.02 : dav1d Vulnerability (NS-SA-2025-0159)	Nessus	NewStart CGSL Local Security Checks	Local	high
239814	TencentOS Server 4: dav1d (TSSA-2024:0971)	Nessus	Tencent Local Security Checks	Local	high
195227	Debian dsa-5686 : dav1d - security update	Nessus	Debian Local Security Checks	Local	high
194594	Fedora 40 : dav1d (2024-12fcc689ac)	Nessus	Fedora Local Security Checks	Local	high
193498	FreeBSD : electron{27,28,29} -- multiple vulnerabilities (f90bf863-e43c-4db3-b5a8-d9603684657a)	Nessus	FreeBSD Local Security Checks	Local	critical
192531	macOS 14.x < 14.4.1 (HT214096)	Nessus	MacOS X Local Security Checks	Local	high
192530	macOS 13.x < 13.6.6 (HT214095)	Nessus	MacOS X Local Security Checks	Local	high
192529	Apple iOS < 17.4.1 Vulnerability (HT214097)	Nessus	Mobile Devices	Local	high
192527	Apple iOS < 16.7.7 Vulnerability (HT214098)	Nessus	Mobile Devices	Local	high
192489	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dav1d (SUSE-SU-2024:0964-1)	Nessus	SuSE Local Security Checks	Local	high
192485	SUSE SLED15 / SLES15 Security Update : dav1d (SUSE-SU-2024:0963-1)	Nessus	SuSE Local Security Checks	Local	high
408305	Alpine: dav1d: security update to 1.3.0-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
408305	Alpine: dav1d: security update to 1.3.0-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high

Detections

Analytics

CVE-2024-1580

high

Tenable Plugins

high

high

high

high

high

critical

high

high

high

high

high

high

high

high