CVE-2009-0398: Gstreamer Plug-Ins

High severity, CVSS 9.3. EPSS: 3.2% chance of exploitation in the next 30 days.

Array index error in the gst_qtp_trak_handler function in gst/qtdemux/qtdemux.c in GStreamer Plug-ins (aka gstreamer-plugins) 0.6.0 allows remote attackers to have an unknown impact via a crafted QuickTime media file.

Affected products

• Gstreamer Plug-Ins: version 0.6.0 only

Published 2009-02-03. Last modified 2026-06-16.