Vulnerabilidades do Freedesktop Gst-plugins-good
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Freedesktop Gst-plugins-good: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:freedesktop:gst-plugins-good
CVE-2026-46470
Crítica · 9.1
CWE-369 14/05/2026
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4…
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.
CVE-2026-46469
Média · 5.5
CWE-369 14/05/2026
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4…
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.
CVE-2026-1940
Alta · 7.5
CWE-125 23/03/2026
Gstreamer: incomplete fix of cve-2026-1940
An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function. The patch added a size validation check lsize + 8 > size, but it does not account for the GST_ROUND_UP_2(lsize) used in the actual offset calculation. When lsize is an odd number, the parser advances more bytes than validated, causing OOB read.