Is CVE-2026-46472 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-46472?

CVE-2026-46472 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-46472

Description

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past the end of a global array, potentially leading to information disclosure.