Approved changes feed: RSS · Atom

cpe:2.3:a:ffmpeg:ffmpeg:cvs:*:*:*:*:*:*:*

part: a version: cvs update: *

VendorFfmpeg (4a8454a9-7e7a-5dff-9bf8-e8d1aa1a4a2f)
ProductFfmpeg (69475a2d-e046-5b0f-b6da-299c42a85e87)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ffmpeg purl2cpe 2026-06-01 10:12:29.687436
pkg:deb/ubuntu/ffmpeg purl2cpe 2026-06-01 10:12:29.687438
pkg:ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.687439
pkg:github/ffmpeg/ffmpeg purl2cpe 2026-06-01 10:12:29.687441
pkg:opensuse/ffmpeg purl2cpe 2026-06-01 10:12:29.687442

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4048 vulnerable 2026-06-08 04:48:42.910013 Details available
Heap-based buffer overflow in the avcodec_default_get_buffer function (utils.c) in FFmpeg libavcodec 0.4.9-pre1 and earlier, as used in products such as (1) mplayer, (2) xine-lib, (3) Xmovie, and (4) GStreamer, allows remote attackers to execute arbitrary commands via small PNG images with palettes.
Published: 2005-12-07T11:00:00.000Z
Updated: 2024-08-07T23:31:48.965Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.