CVE-2026-46469
—CVSS 3.1
5.5 medium
EPSS
<1%p1
Published
()
Modified
Description
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.
- Vendors
- freedesktop
- Products
- gst-plugins-good
- Weakness
- CWE-369
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.