CVE-2026-88914
Received Received - Intake

Integer Overflow in GStreamer gst-plugins-good isomp4 Plugin

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: redhat-SADP

Description
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read of up to 244 bytes, which is then included in the downstream caption output. An attacker could exploit this by tricking a user into opening a malicious media file, potentially resulting in disclosure of adjacent heap memory or application crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-11
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-88914
EUVD
EUVD-2026-75905

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
gstreamer gst-plugins-good to 1.28.7 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-190 The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an integer overflow flaw in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file with CEA-608 closed-caption data, the parser's bounds check can be bypassed due to 32-bit unsigned arithmetic overflow. This leads to an out-of-bounds heap read of up to 244 bytes, which may expose adjacent heap memory or crash the application.

Detection Guidance

This vulnerability requires examining media files for CEA-608 closed-caption data processing. Use tools like gst-discoverer or gst-launch to parse MP4/MOV files and check for crashes or errors during caption extraction. Monitor application logs for heap read errors or crashes when processing media files with captions.

Impact Analysis

An attacker could trick you into opening a malicious media file, causing your application to read beyond its allocated memory. This may result in disclosure of sensitive data in adjacent memory or cause the application to crash. However, code execution is not possible from this vulnerability.

Compliance Impact

This vulnerability could potentially lead to unauthorized disclosure of sensitive data if heap memory containing personal or health information is exposed. This may impact compliance with GDPR (data protection) or HIPAA (health information privacy) if exploited in systems handling such data.

Mitigation Strategies

Update gst-plugins-good to version 1.28.7 or later, which includes the fix for this issue. Avoid opening untrusted media files with CEA-608 captions until patched. If updating is not possible, disable the isomp4 plugin or avoid processing media files containing closed-caption data.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-88914. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart