PT-2026-41013 · Gstreamer · Good Plug-Ins

Published 2026-05-14 · Updated 2026-05-14 · CVE-2026-46470

NVD

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux audio caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.

Fix

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

CVE-2026-46470

Affected Products

Good Plug-Ins

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-46470 · Security Note
• https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch · Note
• https://gstreamer.freedesktop.org/security/sa-2026-0018.html · Note