Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in…

Description

Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.

Scores

EPSS (exploitation in 30 days)

5.2% · top 7.5% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a
• CWE-119 (opens in a new tab)All about CWE-119 and its CVEs

Affected products

• n/a

  • affected n/a

References (30)

• DSA-992 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• GLSA-200602-01 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• MDKSA-2005:229 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• MDKSA-2005:232 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• 19272 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• USN-230-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• DSA-1005 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• 19114 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• GLSA-200601-06 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• 18087 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/ffmpeg/libavcodec/utils.c?rev=1.162&content-type=text/x-cvsweb-markup&cvsroot=FFMpeg (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://cvs.freedesktop.org/gstreamer/gst-ffmpeg/ChangeLog?rev=1.239&view=markup (opens in a new tab)x_refsource_CONFIRMx_transferred
• 18400 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• MDKSA-2005:230 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• GLSA-200603-03 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• 17892 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 18746 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• MDKSA-2005:228 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• 19192 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://article.gmane.org/gmane.comp.video.ffmpeg.devel/26558 (opens in a new tab)x_refsource_MISCx_transferred
• USN-230-2 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• MDKSA-2005:231 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
• ADV-2005-2770 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• DSA-1004 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• 18739 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 18107 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 19279 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 15743 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 18066 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www1.mplayerhq.hu/cgi-bin/cvsweb.cgi/ffmpeg/libavcodec/utils.c.diff?r1=1.161&r2=1.162&cvsroot=FFMpeg (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2005-4048](https://trackcve.app/badge/CVE-2005-4048.svg)](https://trackcve.app/cve/CVE-2005-4048)

Record last updated 7 Aug 2024, 23:31 UTC.