CVE-2026-46470

Publish date: June 1, 2026
Severity
Critical
CVSS score
9.1
Package
gst-plugins-good1.0
Affected versions

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not adequately validate atom data before performing division operations, which can lead to a denial of service due to integer division by zero.