CVE-2009-0386: Heap-based buffer overflow in the qtdemux_parse_samples function in gst/qtdemux/qtdemux.c in GStreamer Good...

Security readout for executives and security teams

This flaw affects GStreamer Good Plug-ins used to process media files. A malformed QuickTime .mov file could corrupt memory and may let an attacker run code in the context of the application opening or processing it. Treat exposure as important where untrusted media is previewed, indexed, transcoded, or opened by users. Likely exposure is Linux or Unix systems with vulnerable gst-plugins-good packages, especially desktops, mail clients, browsers, thumbnailers, media indexers, and media-processing services that parse QuickTime .mov content from untrusted sources. Prioritize remediation for systems that handle external media, because successful exploitation could move from a file-handling event to code execution. The age of the CVE lowers novelty, but legacy media stacks and embedded processing workflows can keep exposure alive. Mitigation focus: Update gst-plugins-good using the relevant operating-system vendor advisory.; Prefer packages containing the upstream 0.10.12-era fix or later vendor backport.; Limit automatic previewing, indexing, or transcoding of untrusted .mov files until patched..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.