Description
VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6Attack Vector: Network
Complexity: High
Privileges: None
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High
Affected Packages2 packages
Also affects: Fedora 37, 38
🔴Vulnerability Details
3CVEListCVE-2023-32570: VideoLAN dav1d before 1↗2023-05-10 OSVCVE-2023-32570: VideoLAN dav1d before 1↗2023-05-10 GHSAGHSA-6q7w-3rwf-fh47: VideoLAN dav1d before 1↗2023-05-10 📋Vendor Advisories
3MicrosoftVideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.↗2023-05-09 DebianCVE-2023-32570: dav1d - VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to ...↗2023 MozillaMozilla Foundation Security Advisory 2023-16: CVE-2023-32570↗