{"id":"CVE-2026-46471","title":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2","summary":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memor…","severity":"none","published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:54:57.677Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-46471","references":[{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0002.html"},{"url":"https://github.com/atredispartners/advisories/blob/master/2026/ATREDIS-2026-0004.md"}],"tags":["cve.org"],"ingestedAt":"2026-10-16T17:24:46.880Z","slug":"CVE-2026-46471","body":"## Overview\n\nAn issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}