CVE-2026-46469: Divide by Zero
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46469?
CVE-2026-46469 is categorized as a denial of service vulnerability due to potential integer division by zero in the GStreamer library.
How do I fix CVE-2026-46469?
To mitigate CVE-2026-46469, upgrade GStreamer gst-plugins-good to version 1.28.2 or later.
What types of attacks can CVE-2026-46469 be exploited for?
CVE-2026-46469 can be exploited to cause a denial of service, disrupting the normal operation of applications using GStreamer.
Which versions of GStreamer are affected by CVE-2026-46469?
CVE-2026-46469 affects GStreamer gst-plugins-good versions prior to 1.28.2.
What is the impact of CVE-2026-46469 on applications using GStreamer?
The impact of CVE-2026-46469 on applications using GStreamer is the potential to crash the application or otherwise cause a service outage.