medium5.5
CVE-2026-46471
An issue was discovered in GStreamer gst-plugins-good before 1.28.2.
Impact
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents.
Affected products
| Product | Affected versions |
|---|---|
| GStreamer Gst-Plugins-Good | before 1.28.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.