PT-2026-41012

CVE-2026-46469

·

Published

2026-05-14

·

Updated

2026-09-22

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-good versions prior to 1.28.2
Description An issue exists when parsing MP4 audio tracks where the isomp4 plugin's qtdemux parse trak() function fails to sufficiently validate atom data before performing division operations. This can result in a denial of service caused by an integer division by zero.
Recommendations Update to version 1.28.2 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ECHO-91D8-ECDE-0F9D
USN-8317-1
Found an issue in the description? Have something to add? Feel free to write us 👾