Gst-plugins-good

This hub aggregates every CVE we track for Gst-plugins-good, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Gst-plugins-good.

• CVE-2026-46470An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before p...4.0May 14, 2026
• CVE-2026-46469An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before p...4.0May 14, 2026
• CVE-2026-1940Gstreamer: incomplete fix of cve-2026-19405.1Mar 23, 2026
• CVE-2025-47219In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.8.1Aug 7, 2025
• CVE-2025-47183In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.6.6Aug 7, 2025