CVE-2013-0875: qffmpeg: out-of-bounds array access in libavcodec/pngdec.c

Severity: Critical

CVSS Score: 9.3

The ff_add_png_paeth_prediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access.