PT-2026-41012 · Gstreamer · Good Plug-Ins

Published 2026-05-14 · Updated 2026-05-14 · CVE-2026-46469

Mitre

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux parse trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2026-46469

Affected Products

Good Plug-Ins

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-46469 · Security Note
• https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch · Note
• https://gstreamer.freedesktop.org/security/sa-2026-0018.html · Note