vulnerability

SUSE: CVE-2024-1580: SUSE Linux Security Advisory

Severity
6
CVSS
(AV:A/AC:M/Au:S/C:P/I:C/A:P)
Published
Feb 19, 2024
Added
Mar 22, 2024
Modified
Dec 5, 2025

Description

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.

Solutions

suse-upgrade-dav1dsuse-upgrade-dav1d-develsuse-upgrade-libdav1d5suse-upgrade-libdav1d6suse-upgrade-libdav1d6-32bitsuse-upgrade-libdav1d7
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.