An integer division by zero flaw in the isomp4 plugin’s MP4 audio parsing routine causes the gst-plugins-good component to crash, rendering services that rely on it unavailable. The weakness is classified as CWE-369 and produces only a denial‑of‑service impact, with no direct effect on confidentiality or integrity.

The vulnerability affects the GStreamer good plug‑ins package (gst‑plugins‑good) prior to version 1.28.2. All releases 1.28.1 and earlier are impacted, while 1.28.2 and newer contain the fix.

The CVSS score of 4 indicates moderate severity. No EPSS score is available, and the flaw is not listed in the CISA KEV catalog. Exploitation requires a crafted MP4 audio file containing malformed atom data that is parsed by the vulnerable plugin. The attack vector is likely local or arises when an application processes untrusted media files received over a network. Because the flaw leads only to a crash, the risk is primarily service disruption rather than privilege escalation or data theft.