CVE-2026-73433 — Integer Underflow (Wrap or Wraparound)

Vendor	Product	Version range	Fixed in
gstreamer	gst-plugins-good	< 1.28.6	1.28.6
gstreamer	gstreamer	<= 1.28.6	—
redhat	enterprise_linux	—	—
redhat	enterprise_linux	—	—
redhat	enterprise_linux	—	—
redhat	enterprise_linux	—	—
ubuntu	gst-plugins-good1.0	—	—

GHSA

A flaw was found in GStreamer gst-plugins-good (avidemux).

ghsa_unreviewed·2026-08-12

CVE-2026-73433 [MEDIUM] CWE-191 A flaw was found in GStreamer gst-plugins-good (avidemux). A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 bytes, the counter underflows to a very large unsigned value, causing subsequent null-terminated string scanning to read far beyond the allocated heap buffer. Date-format normalization may also write beyond the buffer end. Confirmed impacts include heap out-of-bounds read, out-of-bounds write, heap information disclosure (adjacent data appearing in parsed metadata), and application crash/denial of service. The avidemux element is auto-plugged by playbin, decodebin, and gst-discoverer, so open

VulDB

GStreamer up to 1.24.10 Avidemux gst_avi_demux_parse_strd out-of-bounds

vuldb·2026-08-12·CVSS 6.6

CVE-2026-73433 [MEDIUM] GStreamer up to 1.24.10 Avidemux gst_avi_demux_parse_strd out-of-bounds A vulnerability marked as critical has been reported in GStreamer up to 1.24.10. The impacted element is the function gst_avi_demux_parse_strd of the component Avidemux. Performing a manipulation results in out-of-bounds read. This vulnerability was named CVE-2026-73433. The attack may be initiated remotely. There is no available exploit. It is suggested to upgrade the affected component.

Ubuntu

GStreamer Good Plugins vulnerabilities

vendor_ubuntu·2026-10-01·CVSS 3.3

CVE-2026-17072 [LOW] GStreamer Good Plugins vulnerabilities Title: GStreamer Good Plugins vulnerabilities Summary: Several security issues were fixed in GStreamer Good Plugins. Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-17072) Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed certain AVI files. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2026-73433) Seonwook Kim discovered that GStreamer Good Plugins did not correctly parse certain AVI files. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-73434) Seonwook Kim discovered that GStreamer Good Plugins incorrectly handled certain closed ca

Red Hat

gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write

vendor_redhat·2026-08-05·CVSS 6.6

CVE-2026-73433 [MEDIUM] CWE-191 gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 bytes, the counter underflows to a very large unsigned value, causing subsequent null-terminated string scanning to read far beyond the allocated heap buffer. Date-format normalization may also write beyond the buffer end. Confirmed impacts include heap out-of-bounds read, out-of-bounds write, heap information disclosure (adjacent data appearing in parsed metad

CVE-2026-73433: A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a…

Affected

CVSS provenance