dav1d (SUSE:Linux Enterprise Module for Package Hub 15 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Package Hub 15 SP5 package dav1d, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-32570 — CVSS 5.9 (medium): VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.
• CVE-2024-1580 — CVSS 5.9 (medium): An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption…