PT-2026-41012
CVE-2026-46469
·
Published
2026-05-14
·
Updated
2026-09-22
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
GStreamer gst-plugins-good versions prior to 1.28.2
Description
An issue exists when parsing MP4 audio tracks where the isomp4 plugin's
qtdemux parse trak() function fails to sufficiently validate atom data before performing division operations. This can result in a denial of service caused by an integer division by zero.Recommendations
Update to version 1.28.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾