Code execution via qtmoovrecover heap overflow

Heap buffer overflow in qtmoovrecover in GStreamer gst-plugins-good before 1.28.5 allows attackers to execute code via a crafted MRF file. The recovery-file parser trusts atom size fields from MRF input, accepts undersized atoms, and truncates some size calculations, causing too-small heap allocations before later atom-field writes run past the allocation boundary. Reachability requires explicit invocation of the qtmoovrecover utility with attacker-supplied recovery files; the vendor bounds impact to data corruption, process crash, denial of service, or arbitrary code execution.