199 matches found
CLSA-2026-1792769449 gstreamer1-plugins-good: Fix of CVE-2026-46470
CVE-2026-46469: fix division by zero in qtdemuxparsetrak when an MP4 signals 0 audio channels - CVE-2026-46470: fix division by zero in qtdemux audio sample description parsing when an MP4 signals 0 audio channels...
CLSA-2026-1792769310 gstreamer1-plugins-good: Fix of CVE-2026-46470
CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...
CLSA-2026-1792768971 gstreamer1-plugins-good: Fix of CVE-2026-46470
CVE-2026-46470: qtdemux: fix division by zero in qtdemuxaudiocaps when an LPCM sound sample description signals 0 audio channels...
PT-2026-115636
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux parse chnl function may read past the end of a global array, potentially leading to information disclosure...
PT-2026-115635
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux parse uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...
Astra Linux – vulnerability in gst-plugins-good1.0
GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the extractccfromdata function within qtdemux.c. In the FOURCCc708 case, subtracting atomlength - 8 may result in an underflow if atomlength is less than 8. When this subtraction...
Astra Linux – vulnerability in gst-plugins-good1.0
GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds read has been detected in the qtdemuxparsesamples function within qtdemux.c. This issue occurs when qtdemuxparsesamples reads data beyond the boundaries of the stream-stco buffer. The following code...
CLEANSTART-2026-FY99850 qtdemux_tag_add_str_full function in gst/isomp4/qtdemux
Security vulnerability affects the gst-plugins-good package. The qtdemuxtagaddstrfull function in gst/isomp4/qtdemux...
CLEANSTART-2026-TJ00141 qtdemux_parse_samples function in gst/isomp4/qtdemux
Security vulnerability affects the gst-plugins-good package. The qtdemuxparsesamples function in gst/isomp4/qtdemux...
CLEANSTART-2026-SR74236 DOS / potential heap overwrite in qtdemux using zlib decompression
Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in qtdemux using zlib decompression...
PT-2026-122294
Security vulnerability affects the gst-plugins-good package. The qtdemux tag add str full function in gst/isomp4/qtdemux...
PT-2026-122365
Security vulnerability affects the gst-plugins-good package. The qtdemux parse samples function in gst/isomp4/qtdemux...
PT-2026-122360
Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in qtdemux using zlib decompression...
Rocky Linux 10.2 [CIQ] Security Update: gstreamer1-plugins-good / gstreamer1-plugins-good-debuginfo / etc (crlsa-2026_49508)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202649508 advisory. gstreamer: GStreamer: Arbitrary code execution via stack-based buffer overflow in qtdemux CVE-2026-5056 Tenable has extracted the preceding description block...
Astra Linux – Vulnerability in gst-plugins-good1.0
DOS: Potential heap overwrite in qtdemux using zlib decompression. Integer overflow in the qtdemux element within the qtdemuxinflate function can lead to a segfault, or it may cause a heap overwrite, depending on the libc and operating system. Depending on the libc used and the underlying operati...
Astra Linux – Vulnerability in gst-plugins-good1.0
GStreamer is a library for constructing graphs of media-handling components. A out-of-bounds write vulnerability was identified in the converttos3341a function in isomp4/qtdemux.c. The vulnerability arises due to a discrepancy between the size of memory allocated to the storage array and the loop...
Astra Linux – Vulnerability in gst-plugins-good1.0
GStreamer is a library for constructing graphs of media-handling components. A OOB-read vulnerability has been discovered in the qtdemuxMergeSampleTable function within qtdemux.c. The issue arises from the fact that the size of the stts buffer is not properly checked before reading sttsDuration,...
CVE-2026-88914 Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...
CVE-2026-88914 Gstreamer1-plugins-good: gstreamer: integer overflow and out-of-bounds read in qtdemux cea-608 closed-caption parser
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...
gstreamer1-plugins-good security update
An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...