{"schema":"vulnpedia.research/1","cve":"CVE-2026-46471","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0002.html","tags":["vendor-reference"],"source":"mitre","sourceId":"mitre","modified":"2026-10-16T15:54:57.677Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-10-16T15:54:57.677Z","url":"https://gstreamer.freedesktop.org/security/sa-2026-0002.html"},{"source":"nvd","sourceId":"CVE-2026-46471","modified":"2026-10-19T16:17:07.960","url":"https://gstreamer.freedesktop.org/security/sa-2026-0002.html"},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://gstreamer.freedesktop.org/security/sa-2026-0002.html"}]},{"url":"https://github.com/atredispartners/advisories/blob/master/2026/ATREDIS-2026-0004.md","tags":["exploit","vendor-reference"],"source":"mitre","sourceId":"mitre","modified":"2026-10-16T15:54:57.677Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-10-16T15:54:57.677Z","url":"https://github.com/atredispartners/advisories/blob/master/2026/ATREDIS-2026-0004.md"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-19T15:30:39.782Z","url":"https://github.com/atredispartners/advisories/blob/master/2026/ATREDIS-2026-0004.md"},{"source":"nvd","sourceId":"CVE-2026-46471","modified":"2026-10-19T16:17:07.960","url":"https://github.com/atredispartners/advisories/blob/master/2026/ATREDIS-2026-0004.md"},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://github.com/atredispartners/advisories/blob/master/2026/ATREDIS-2026-0004.md"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46471","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-46471"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554180","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554180"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46471","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-46471"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46471","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46471"}]},{"source":"euvd","sourceId":"EUVD-2026-102936","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102936","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102936","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102936"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_10:gstreamer1-plugins-good","product":"gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_10:gstreamer1-plugins-good-gtk","product":"gstreamer1-plugins-good-gtk as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-gtk","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_10:gstreamer1-plugins-good.src","product":"gstreamer1-plugins-good.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_7:gstreamer1-plugins-good","product":"gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_7:gstreamer1-plugins-good.src","product":"gstreamer1-plugins-good.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_8:gstreamer1-plugins-good","product":"gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_8:gstreamer1-plugins-good-gtk","product":"gstreamer1-plugins-good-gtk as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-gtk","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_8:gstreamer1-plugins-good.src","product":"gstreamer1-plugins-good.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_9:gstreamer1-plugins-good","product":"gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_9:gstreamer1-plugins-good-gtk","product":"gstreamer1-plugins-good-gtk as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-gtk","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]},{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json","productId":"red_hat_enterprise_linux_9:gstreamer1-plugins-good.src","product":"gstreamer1-plugins-good.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"If multimedia playback and processing are not required, remove the package containing the affected plugin:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing this package may prompt the removal of dependent desktop components or graphical media applications, potentially impacting the GNOME desktop environment. Verify package dependencies before proceeding. Headless server environments managed via terminal remain fully functional.\n\nAdditionally, apply operational controls by avoiding opening or processing untrusted MP4 files in applications that utilize the GStreamer framework."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-46471","modified":"2026-10-19T18:42:58+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46471.json"}]}],"vendorCoverage":{"total":11,"shown":11,"omitted":0,"source":"redhat"}}