Skip to content

CVE-2026-46470 on CTRL-OS 26.05

Aliases: CVE-2026-46470, CVE-2026-46469, CVE-2026-46472

Packages: gst_all_1.gst-plugins-good

Status: Plausible

Advisory Information

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.

Updates

2026-06-03 22:23 CEST

Metadata changes:

  • Status for package gst_all_1.gst-plugins-good: “Plausible”

(Amended on: 2026-06-03 22:24 CEST)

2026-05-28 23:53 CEST

Metadata changes:

  • Status for package gst_all_1.gst-plugins-good: “New”