CVE-2023-32570

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-32570
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-32570.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-32570
Aliases
Downstream
Related
Published
2023-05-10T05:15:12.190Z
Modified
2026-02-25T09:13:09.913849480Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

VideoLAN dav1d before 1.2.0 has a threadtask.c race condition that can lead to an application crash, related to dav1ddecodeframeexit.

References

Affected packages

Git / gitlab.com/wireshark/wireshark

Affected ranges

Type
GIT
Repo
https://gitlab.com/wireshark/wireshark
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
708b3da25e95f19ae6d667a88a7ddcd15d482b63

Affected versions

Other
backups/ethereal@18706
ethereal-0-3-15
start
ethereal-0.*
ethereal-0.3.15

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-32570.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "276447002942996880987950087851537954663",
                "132906667476950066097483779204353115346",
                "239370529215823007854779076509072508406",
                "38844481977624405410574931784071453412",
                "127732521420511354136246032497255888470",
                "64046436392671780123407604575093110683",
                "136696390852243182730757565891748839143",
                "131379049850691521761637708344340355270",
                "232139351518570863640451756947516414086",
                "231702025502970519062930195785008242477",
                "322446636392483131555537062956820825919",
                "136696390852243182730757565891748839143",
                "300322307238531937081969650325846381929",
                "233294236845395818881830230472008224448"
            ]
        },
        "source": "https://gitlab.com/wireshark/wireshark@708b3da25e95f19ae6d667a88a7ddcd15d482b63",
        "signature_type": "Line",
        "target": {
            "file": "wiretap/wtap.c"
        },
        "signature_version": "v1",
        "id": "CVE-2023-32570-0fdd8fb4"
    },
    {
        "source": "https://gitlab.com/wireshark/wireshark@708b3da25e95f19ae6d667a88a7ddcd15d482b63",
        "digest": {
            "length": 155.0,
            "function_hash": "210143509383192007226386086233748934892"
        },
        "deprecated": false,
        "signature_type": "Function",
        "target": {
            "function": "wtap_encap_short_string",
            "file": "wiretap/wtap.c"
        },
        "signature_version": "v1",
        "id": "CVE-2023-32570-66f247cb"
    },
    {
        "deprecated": false,
        "digest": {
            "length": 149.0,
            "function_hash": "218380070423264983891099357105258071775"
        },
        "source": "https://gitlab.com/wireshark/wireshark@708b3da25e95f19ae6d667a88a7ddcd15d482b63",
        "signature_type": "Function",
        "target": {
            "function": "wtap_encap_string",
            "file": "wiretap/wtap.c"
        },
        "signature_version": "v1",
        "id": "CVE-2023-32570-bab42ac9"
    }
]