CVE-2026-73434

Modified Modified - Updated After Analysis

Buffer Overflow in GStreamer gst-plugins-good avidemux

Publication date: 2026-08-12

Last updated on: 2026-08-19

Assigner: redhat-SADP

Description

A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp->fields value, rather than by sizeof(gst_riff_vprp_video_field_desc). This can cause the parser to treat more field descriptors as available than fit in the input buffer, resulting in out-of-bounds reads. Processing a crafted AVI via playbin/decodebin can crash the application (denial of service). Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-19

Generated

2026-09-02

AI Q&A

2026-08-13

EPSS Evaluated

2026-08-31

NVD

CVE-2026-73434

EUVD

EUVD-2026-57443

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
redhat	enterprise_linux	10.0
gstreamer	gstreamer	to 1.28.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds read flaw in GStreamer's gst-plugins-good package, specifically in the avidemux component. It occurs when parsing the vprp video field descriptor in the function gst_avi_demux_riff_parse_vprp(). The issue arises because the number of available field descriptors is calculated by dividing the buffer size by an attacker-controlled value instead of the correct descriptor size. This allows more descriptors to be processed than fit in the buffer, leading to memory reads outside intended bounds.

Detection Guidance

Detecting this vulnerability requires checking the version of gst-plugins-good installed on your system. Use the command 'gst-inspect-1.0 --version' to check the installed version. If the version is below 1.28.6, the system is vulnerable.

Impact Analysis

An attacker could exploit this by crafting a malicious AVI file. When processed via playbin or decodebin, this could crash the application, causing a denial of service. It may also expose sensitive information or bypass memory protections like ASLR, though the primary impact is application instability.

Compliance Impact

This vulnerability primarily causes out-of-bounds reads in memory, which could lead to application crashes or denial of service. It does not directly expose or leak sensitive data, but could potentially allow bypassing memory protections. For compliance standards like GDPR or HIPAA, the impact is likely minimal unless the application processes sensitive media files in a regulated environment. The main risk is service disruption rather than data exposure.

Mitigation Strategies

Immediately upgrade gst-plugins-good to version 1.28.6 or later. If upgrading is not possible, avoid processing untrusted AVI files using playbin or decodebin components until the update is applied.

Hi! I’m here to help you understand CVE-2026-73434. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70