title: Integer overflow in VideoLAN dav1d
description: An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past version 1.4.0 of dav1d.
problem types: CWE-190 Integer Overflow or Wraparound
affected:
{
defaultStatus: unaffected
product: dav1d
repo: https://code.videolan.org/videolan/dav1d
vendor: VideoLAN
versions:
lessThan: 1.4.0, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: LOW
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL