{"id":"CVE-2026-46469","aliases":["ALPINE-CVE-2026-46469","CLSA-2026-1792572593","CLSA-2026-1792769449","DEBIAN-CVE-2026-46469","EUVD-2026-30347","GHSA-f2c5-5798-qfvg","UBUNTU-CVE-2026-46469","USN-8317-1"],"status":"published","title":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio...","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00101,"percentile":0.00886,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-369"],"published":"2026-05-14T17:38:44Z","modified":"2026-11-04T03:30:21Z","fixes":[{"ecosystem":"Alpine:v3.24","package":"gst-plugins-good","fixed_in":["1.26.3-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gst-plugins-good1.0","fixed_in":["1.26.2-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gst-plugins-good1.0","fixed_in":["1.28.2-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.20.3-0ubuntu1.6"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"gst-plugins-good1.0","fixed_in":["1.24.2-1ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"gst-plugins-good1.0","fixed_in":["1.26.5-1ubuntu2.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.24","package":"gst-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.3-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-4.el9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-4.el9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gstreamer1-plugins-good-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.12-4.el9.tuxcare.els6"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gstreamer1-plugins-good","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-6.el9.tuxcare.els21"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gstreamer1-plugins-good-gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-6.el9.tuxcare.els21"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gstreamer1-plugins-good-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18.4-6.el9.tuxcare.els21"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22.0-5","1.22.0-5+deb12u1","1.22.0-5+deb12u2","1.22.0-5+deb12u3","1.22.0-5+deb12u4","1.22.1-1","1.22.10-1","1.22.3-1","1.22.3-2","1.22.4-1","1.22.5-1","1.22.6-1","1.22.7-1","1.22.8-1","1.22.8-2","1.22.8-3","1.22.9-1","1.23.1-1","1.23.2-1","1.23.90-1","1.24.0-1","1.24.1-1","1.24.1-2","1.24.10-1","1.24.11-1","1.24.11-2","1.24.11-3","1.24.11-4","1.24.11-5","1.24.12-1","1.24.2-1","1.24.3-1","1.24.4-1","1.24.5-1","1.24.6-1","1.24.7-1","1.24.8-1","1.24.9-1","1.25.1-1","1.25.1-2","1.25.1-3","1.25.50-1","1.25.90-1","1.25.90-2","1.26.0-1","1.26.1-1","1.26.10-1","1.26.2-1","1.26.3-1","1.26.4-1","1.26.5-1","1.26.5-2","1.26.5-2+hurd.1","1.26.5-3","1.26.6-1","1.26.7-1","1.26.8-1","1.26.9-1","1.27.1-1","1.27.2-1","1.27.50-1","1.27.50-2","1.27.90-1","1.28.0-1","1.28.1-1","1.28.2-1","1.28.2-2","1.28.2-3","1.28.2-4","1.28.3-1","1.28.4-1","1.28.5-1","1.28.6-1","1.28.7-1","1.28.8-1","1.29.1-1","1.29.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.2-1+deb13u1"}]}],"versions":["1.26.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28.2-1"}]}],"versions":["1.26.10-1","1.26.2-1","1.26.3-1","1.26.4-1","1.26.5-1","1.26.5-2","1.26.5-2+hurd.1","1.26.5-3","1.26.6-1","1.26.7-1","1.26.8-1","1.26.9-1","1.27.1-1","1.27.2-1","1.27.50-1","1.27.50-2","1.27.90-1","1.28.0-1","1.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-0ubuntu1.6"}]}],"versions":["1.18.5-1ubuntu2","1.18.5-1ubuntu3","1.20.0-2ubuntu1","1.20.1-1ubuntu1","1.20.3-0ubuntu1","1.20.3-0ubuntu1.1","1.20.3-0ubuntu1.3","1.20.3-0ubuntu1.4","1.20.3-0ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-1ubuntu1.4"}]}],"versions":["1.22.6-1ubuntu1","1.22.6-1ubuntu2","1.22.8-3ubuntu1","1.22.9-1ubuntu1","1.24.0-1ubuntu5","1.24.0-1ubuntu7","1.24.1-2ubuntu1","1.24.2-1ubuntu1","1.24.2-1ubuntu1.1","1.24.2-1ubuntu1.2","1.24.2-1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.5-1ubuntu2.3"}]}],"versions":["1.26.0-1ubuntu2","1.26.0-1ubuntu3","1.26.2-1ubuntu1","1.26.4-1ubuntu1","1.26.5-1ubuntu1","1.26.5-1ubuntu2","1.26.5-1ubuntu2.1","1.26.5-1ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20.3-0ubuntu1.6"}]}],"versions":["1.18.5-1ubuntu2","1.18.5-1ubuntu3","1.20.0-2ubuntu1","1.20.1-1ubuntu1","1.20.3-0ubuntu1","1.20.3-0ubuntu1.1","1.20.3-0ubuntu1.3","1.20.3-0ubuntu1.4","1.20.3-0ubuntu1.5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-1ubuntu1.4"}]}],"versions":["1.22.6-1ubuntu1","1.22.6-1ubuntu2","1.22.8-3ubuntu1","1.22.9-1ubuntu1","1.24.0-1ubuntu5","1.24.0-1ubuntu7","1.24.1-2ubuntu1","1.24.2-1ubuntu1","1.24.2-1ubuntu1.1","1.24.2-1ubuntu1.2","1.24.2-1ubuntu1.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gst-plugins-good1.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.5-1ubuntu2.3"}]}],"versions":["1.26.0-1ubuntu2","1.26.0-1ubuntu3","1.26.2-1ubuntu1","1.26.4-1ubuntu1","1.26.5-1ubuntu1","1.26.5-1ubuntu2","1.26.5-1ubuntu2.1","1.26.5-1ubuntu2.2"],"bundled":2}],"products":[{"vendor":"freedesktop","product":"gst-plugins-good"},{"vendor":"gstreamer","product":"good plug-ins"}],"references":[{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0018.html","tags":["Vendor Advisory","report"]},{"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","tags":["Patch","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46469","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f2c5-5798-qfvg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-46469","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792572593.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1940","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1792769449.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-46469","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-46469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46469","tags":["report"]},{"url":"https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8317-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-46470","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-46469","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.","status":"published","published":"2026-05-14T17:38:44.049Z","modified":"2026-05-14T18:42:56.086Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T13:47:06.353366Z"}],"euvd":[{"id":"EUVD-2026-30347","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.","status":"published","published":"2026-05-14T17:38:44Z","modified":"2026-05-14T18:42:56Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T19:04:30.595644Z"}],"ghsa":[{"id":"GHSA-f2c5-5798-qfvg","title":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio...","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.","status":"published","published":"2026-05-14T18:32:57Z","modified":"2026-05-14T18:33:03Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T15:08:08.953643Z"}],"nvd":[{"id":"CVE-2026-46469","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.","status":"published","published":"2026-05-14T18:16:50.653Z","modified":"2026-10-26T14:10:00.13Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:12:19.020465Z"}],"osv":[{"id":"ALPINE-CVE-2026-46469","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.","status":"published","published":"2026-05-14T18:16:50.653Z","modified":"2026-11-03T06:32:55.93743329Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:16:26.770911Z"},{"id":"DEBIAN-CVE-2026-46469","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.","status":"published","published":"2026-05-14T18:16:50.653Z","modified":"2026-10-27T09:47:32.972993343Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:56.025495Z"},{"id":"UBUNTU-CVE-2026-46469","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.","status":"published","published":"2026-05-14T18:16:00Z","modified":"2026-11-04T03:30:21.089617349Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-04T03:56:39.110241Z"},{"id":"CLSA-2026-1792572593","title":"gstreamer1-plugins-good: Fix of 3 CVEs","description":"- CVE-2026-46469: avoid division by zero in qtdemux_parse_trak when zero audio\n  channels are signalled\n- CVE-2026-46470: avoid division by zero in qtdemux_audio_caps when zero audio\n  channels are signalled for raw LPCM\n- CVE-2026-1940: fix out-of-bounds read in gst_wavparse_adtl_chunk on odd-sized\n  adtl sub-chunks","status":"published","published":"2026-10-21T08:50:04Z","modified":"2026-10-26T09:43:31.500578273Z","updated_at":"2026-11-02T15:43:54.672859Z"},{"id":"CLSA-2026-1792769449","title":"gstreamer1-plugins-good: Fix of CVE-2026-46470","description":"- CVE-2026-46469: fix division by zero in qtdemux_parse_trak when an MP4\n  signals 0 audio channels\n- CVE-2026-46470: fix division by zero in qtdemux audio sample description\n  parsing when an MP4 signals 0 audio channels","status":"published","published":"2026-10-23T15:31:00Z","modified":"2026-10-26T09:43:10.785121786Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"USN-8317-1","title":"gst-plugins-good1.0 vulnerabilities","description":"It was discovered that GStreamer Good Plugins incorrectly handled certain\nMP4 audio tracks. An attacker could possibly use this issue to cause\nGStreamer Good Plugins to crash, resulting in a denial of service.","status":"published","published":"2026-05-27T12:07:51Z","modified":"2026-05-27T15:47:45.896740129Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}