{"id":"CVE-2023-32570","details":"VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.","modified":"2026-03-15T14:50:01.903482Z","published":"2023-05-10T05:15:12.190Z","related":["SUSE-SU-2023:2618-1","openSUSE-SU-2024:13730-1"],"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3WGSO7UMOF4MVLQ5H6KIV7OG6ONS377B/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LXZ6CUNJFDJLCFOZHY2TIGMCAEITLCRP/"},{"type":"ADVISORY","url":"https://code.videolan.org/videolan/dav1d/-/tags/1.2.0"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202310-05"},{"type":"FIX","url":"https://code.videolan.org/videolan/dav1d/-/commit/cf617fdae0b9bfabd27282854c8e81450d955efa"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32570.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"fixed":"1.2.0"}]},{"events":[{"introduced":"0"},{"last_affected":"37"}]},{"events":[{"introduced":"0"},{"last_affected":"38"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}