CVE-2026-46472: GStreamer gst-plugins-good vulnerability

Q: What input must an attacker control to trigger this issue?

An attacker would need to supply a crafted MP4 file that reaches the isomp4 plugin's qtdemux_parse_chnl parsing function.

Q: What is the potential security impact?

The out-of-bounds read may lead to information disclosure.

Q: Which versions are affected?

GStreamer gst-plugins-good versions before 1.28.2 are affected.

Published Oct 16, 2026

Updated

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure.

Affected Software

1 affected component

GStreamer gst-plugins-good<1.28.2

Event History

Oct 16, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What input must an attacker control to trigger this issue?

An attacker would need to supply a crafted MP4 file that reaches the isomp4 plugin's qtdemux_parse_chnl parsing function.

What is the potential security impact?

The out-of-bounds read may lead to information disclosure.

Which versions are affected?

GStreamer gst-plugins-good versions before 1.28.2 are affected.

CVE-2026-46472: GStreamer gst-plugins-good vulnerability

Affected Software

Event History

Frequently Asked Questions

What input must an attacker control to trigger this issue?

What is the potential security impact?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What input must an attacker control to trigger this issue?

What is the potential security impact?

Which versions are affected?