An issue was discovered in GStreamer gst-plugins-good before 1.28.2.
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Product
- ImageMagick / Ghostscript / FFmpeg / libxml2
- EPSS
- 0.002 (p8)
Why it ranks 6 (Routine)
- Covered by 2 independent sources
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-46471 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.