Description
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past the end of a global array, potentially leading to information disclosure.
Published: 2026-10-16
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: Information Disclosure
Action: Update
AI Analysis

Impact

A crafted MP4 file can cause GStreamer’s isomp4 plugin to read past the end of a global array during parsing of the file header, exposing data that resides in memory to the process. This out‑of‑bounds read flaw is a classic information‑disclosure vulnerability.

Affected Systems

The vulnerability exists in GStreamer gst-plugins-good versions prior to 1.28.2. All releases below 1.28.2 are vulnerable, while the 1.28.2 release contains the fix for the issue.

Risk and Exploitability

The CVSS score of 7.5 indicates a high severity, but EPSS is not available, so the current likelihood of exploitation is unknown. The flaw allows a malicious or untrusted MP4 file to be parsed, which can lead to disclosure of sensitive memory contents. The vulnerability is not listed in CISA KEV, and there is no evidence of privilege escalation or denial‑of‑service impact. Attacks would involve supplying a specially crafted MP4 file to the application using GStreamer.

Generated by OpenCVE AI on October 16, 2026 at 22:33 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade GStreamer gst-plugins-good to version 1.28.2 or newer
  • If upgrading is not possible, run GStreamer in a sandbox or a user account with limited privileges when processing untrusted media files
  • Disable or remove the isomp4 plugin from the GStreamer pipeline when handling untrusted MP4 files

Generated by OpenCVE AI on October 16, 2026 at 22:33 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 17 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
Title gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnl
References
Metrics threat_severity

None

 threat_severity

Low

Fri, 16 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Title Potential Information Disclosure via Out-of-Bounds Read in GStreamer isomp4 Plugin
Weaknesses CWE-200
CWE-788

Fri, 16 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 16 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-125
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Fri, 16 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Title Potential Information Disclosure via Out-of-Bounds Read in GStreamer isomp4 Plugin
Weaknesses CWE-200
CWE-788

Fri, 16 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Description An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past the end of a global array, potentially leading to information disclosure.
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-16T19:00:49.489Z

Reserved: 2026-05-14T00:00:00.000Z

Link: CVE-2026-46472

cve-icon Vulnrichment

Updated: 2026-10-16T19:00:39.819Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-16T16:18:11.647

Modified: 2026-10-16T19:55:59.740

Link: CVE-2026-46472

cve-icon Redhat

Severity : Low

Publid Date: 2026-10-16T00:00:00Z

Links: CVE-2026-46472 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-16T22:45:14Z

Weaknesses