Every CVE whose affected-product data names Videolan Dav1d, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2023-32570 — CVSS 5.9 (medium): VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.
CVE-2024-1580 — CVSS 5.9 (medium): An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption…