{"schema":"vulnpedia.research/1","cve":"CVE-2026-46472","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://gstreamer.freedesktop.org/security/sa-2026-0018.html","tags":["vendor-reference"],"source":"mitre","sourceId":"mitre","modified":"2026-10-16T15:52:19.064Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2026-10-16T15:52:19.064Z","url":"https://gstreamer.freedesktop.org/security/sa-2026-0018.html"},{"source":"nvd","sourceId":"CVE-2026-46472","modified":"2026-10-16T19:55:59.740","url":"https://gstreamer.freedesktop.org/security/sa-2026-0018.html"},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://gstreamer.freedesktop.org/security/sa-2026-0018.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-46472","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-46472"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554181","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554181"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-46472","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-46472"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46472","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46472"}]},{"source":"euvd","sourceId":"EUVD-2026-102937","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102937","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102937","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102937"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_10:gstreamer1-plugins-good","product":"gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_10:gstreamer1-plugins-good-gtk","product":"gstreamer1-plugins-good-gtk as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-gtk","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_10:gstreamer1-plugins-good.src","product":"gstreamer1-plugins-good.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_7:gstreamer1-plugins-good","product":"gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_7:gstreamer1-plugins-good.src","product":"gstreamer1-plugins-good.src as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_8:gstreamer1-plugins-good","product":"gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_8:gstreamer1-plugins-good-gtk","product":"gstreamer1-plugins-good-gtk as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-gtk","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_8:gstreamer1-plugins-good.src","product":"gstreamer1-plugins-good.src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_9:gstreamer1-plugins-good","product":"gstreamer1-plugins-good as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_9:gstreamer1-plugins-good-gtk","product":"gstreamer1-plugins-good-gtk as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good-gtk","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]},{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json","productId":"red_hat_enterprise_linux_9:gstreamer1-plugins-good.src","product":"gstreamer1-plugins-good.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"On systems where multimedia playback and demuxing are not required, remove the package to eliminate exposure:\n\n# dnf remove gstreamer1-plugins-good\n\nCaveat: Removing gstreamer1-plugins-good may uninstall dependent graphical desktop packages (such as GNOME components) or break media playback in applications relying on the GStreamer framework. Headless server environments remain fully functional via terminal access.\n\nFor systems that must parse media files, do not open untrusted MP4 files and isolate media handling pipelines within unprivileged containers or sandboxes."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/gstreamer1-plugins-good?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-46472","modified":"2026-10-19T08:33:19+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46472.json"}]}],"vendorCoverage":{"total":11,"shown":11,"omitted":0,"source":"redhat"}}