vulnerability

Alpine Linux: CVE-2024-1580: Vulnerability in Multiple Components

Severity
6
CVSS
(AV:A/AC:M/Au:S/C:P/I:C/A:P)
Published
02/19/2024
Added
03/26/2024
Modified
01/27/2025

Description

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Solution

alpine-linux-upgrade-dav1d
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.