CVE-2026-46469 — GStreamer Gst-Plugins-Good Denial of Service
CVE-2026-46469 — An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by
What This Means For You
- If your environment is affected by CWE-369, review your exposure and prioritize patching based on your environment. Monitor vendor advisories for CVE-2026-46469 updates and patches.
Related ATT&CK Techniques
🛡️ Detection Rules
1 rule · 6 SIEM formats1 detection rule auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.
GStreamer MP4 Parsing Integer Division by Zero (CVE-2026-46469)
title: GStreamer MP4 Parsing Integer Division by Zero (CVE-2026-46469)
id: scw-2026-05-14-ai-1
status: experimental
level: medium
description: |
Detects the execution of GStreamer plugins (gst-plugins-good) attempting to parse MP4 audio tracks using the qtdemux_parse_trak function, which is vulnerable to integer division by zero (CVE-2026-46469). This rule specifically targets the vulnerable function call within the command line, indicating a potential exploit attempt leading to a denial of service.
author: SCW Feed Engine (AI-generated)
date: 2026-05-14
references:
- https://shimiscyberworld.com/posts/nvd-CVE-2026-46469/
tags:
- attack.initial_access
- attack.t1190
logsource:
category: process_creation
detection:
selection:
Image|contains:
- 'gst-plugins-good'
CommandLine|contains:
- 'qtdemux_parse_trak'
condition: selection
falsepositives:
- Legitimate administrative activity
Source: Shimi's Cyber World · License & reuse
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-46469 | vulnerability | CVE-2026-46469 |
| CWE-369 | weakness | CWE-369 |
Written by SCW Vulnerability Desk
Source & Attribution
| Source Platform | NVD |
| Channel | National Vulnerability Database |
| Published | May 14, 2026 at 21:16 UTC |
This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.
Believe this infringes your rights? Submit a takedown request.
Related coverage
CVE-2026-8621: Crabbox Authentication Bypass Allows Impersonation
CVE-2026-8621 — Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-admin shared-token callers to impersonate other owners or organizations by spoofing identity...
CVE-2026-45375: Critical XSS in SiYuan Knowledge Management System
CVE-2026-45375 — SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan's Bazaar (community marketplace) renders the name and version fields of a...
CVE-2026-45148 — SiYuan is an open-source personal knowledge management
CVE-2026-45148 — SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, broken access control in the searchAsset, searchTag, searchWidget, and searchTemplate publish-mode Readers...