An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugins qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.
Weakness
The product divides a value by zero.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gst-plugins-good | Freedesktop | * | 1.28.2 (excluding) |
| Gst-plugins-good1.0 | Ubuntu | jammy | * |
| Gst-plugins-good1.0 | Ubuntu | noble | * |
| Gst-plugins-good1.0 | Ubuntu | questing | * |
| Gst-plugins-good1.0 | Ubuntu | upstream | * |