CVE-2026-46470: Divide by Zero
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46470?
CVE-2026-46470 has a severity rating that could lead to denial of service due to integer division by zero.
How do I fix CVE-2026-46470?
To fix CVE-2026-46470, upgrade GStreamer gst-plugins-good to version 1.28.2 or later.
What kind of vulnerability is CVE-2026-46470?
CVE-2026-46470 is a denial of service vulnerability related to insufficient validation in the qtdemux_audio_caps function.
Which software versions are affected by CVE-2026-46470?
CVE-2026-46470 affects GStreamer gst-plugins-good versions prior to 1.28.2.
What component of GStreamer is involved in CVE-2026-46470?
The isomp4 plugin's qtdemux_audio_caps function in GStreamer is involved in CVE-2026-46470.