CVE-2005-4048: Ffmpeg

High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.

Affected products

• Ffmpeg Ffmpeg: version 0.4.6 only; version 0.4.7 only; version 0.4.8 only; version 0.4.9 only; version cvs only

Published 2005-12-07. Last modified 2026-06-16.