CVE-2026-73434 — Out-of-bounds Read in Gst-plugins-good

Vendor	Product	Version range	Fixed in
gstreamer	gst-plugins-good	< 1.28.6	1.28.6
gstreamer	gstreamer	< 1.28.6	1.28.6
redhat	enterprise_linux	—	—
redhat	enterprise_linux	—	—
redhat	enterprise_linux	—	—
redhat	enterprise_linux	—	—
ubuntu	gst-plugins-good1.0	—	—

VulDB

GStreamer up to 1.24.10 AVI gst_avi_demux_riff_parse_vprp fields out-of-bounds

vuldb·2026-08-12·CVSS 6.1

CVE-2026-73434 [MEDIUM] GStreamer up to 1.24.10 AVI gst_avi_demux_riff_parse_vprp fields out-of-bounds A vulnerability classified as critical has been found in GStreamer up to 1.24.10. This impacts the function gst_avi_demux_riff_parse_vprp of the component AVI Handler. The manipulation of the argument fields leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-73434. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

GHSA

A flaw was found in GStreamer gst-plugins-good (avidemux).

ghsa_unreviewed·2026-08-12

CVE-2026-73434 [HIGH] CWE-125 A flaw was found in GStreamer gst-plugins-good (avidemux). A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp->fields value, rather than by sizeof(gst_riff_vprp_video_field_desc). This can cause the parser to treat more field descriptors as available than fit in the input buffer, resulting in out-of-bounds reads. Processing a crafted AVI via playbin/decodebin can crash the application (denial of service). Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072).

Ubuntu

GStreamer Good Plugins vulnerabilities

vendor_ubuntu·2026-10-01·CVSS 3.3

CVE-2026-17072 [LOW] GStreamer Good Plugins vulnerabilities Title: GStreamer Good Plugins vulnerabilities Summary: Several security issues were fixed in GStreamer Good Plugins. Yazan Balawneh discovered that GStreamer Good Plugins incorrectly handled certain FLAC audio streams. An attacker could possibly use this issue to obtain sensitive information. (CVE-2026-17072) Seonwook Kim discovered that GStreamer Good Plugins incorrectly parsed certain AVI files. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2026-73433) Seonwook Kim discovered that GStreamer Good Plugins did not correctly parse certain AVI files. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-73434) Seonwook Kim discovered that GStreamer Good Plugins incorrectly handled certain closed ca

Red Hat

gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing

vendor_redhat·2026-08-05·CVSS 6.1

CVE-2026-73434 [MEDIUM] CWE-125 gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp->fields value, rather than by sizeof(gst_riff_vprp_video_field_desc). This can cause the parser to treat more field descriptors as available than fit in the input buffer, resulting in out-of-bounds reads. Processing a crafted AVI via playbin/decodebin can crash the application (denial of service). Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072). A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse

CVE-2026-73434: A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries…

Affected

CVSS provenance