4.0Mittel
CVE-2026-46470
Beschreibung
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.
Schwachstellentyp (CWE):
CWE-369
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| freedesktop | gst-plugins-good | < 1.28.2 | |
| GStreamer | Good Plug-ins | < 1.28.2 |
Referenzen und Patches
CPE-Treffer (NVD) (1)
cpe:2.3:a:freedesktop:gst-plugins-good:*:*:*:*:*:*:*:*< 1.28.2