CVE-2026-73434: Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing
A flaw was found in GStreamer gst-plugins-good (avidemux). In gstavidemuxriffparsevprp(), the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp->fields value, rather than by sizeof(gstriffvprpvideofielddesc). This can cause the parser to treat more field descriptors as available than fit in the input buffer, resulting in out-of-bounds reads. Processing a crafted AVI via playbin/decodebin can crash the application (denial of service). Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072).
Other sources
The CVE was requested in this ticket: https://redhat.atlassian.net/browse/PSIRTSUPT-20037 (Also received as resubmission: https://redhat.atlassian.net/browse/PSIRTSUPT-21422)
Reserved the following CVE ID(s): CVE-2026-73434 ├─ State: RESERVED ├─ Owning CNA: redhat ├─ Reserved by: ctimko (redhat) └─ Reserved on: Wed Aug 12 16:14:17 2026 +0000
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
gstreamer1-plugins-goodto a version that resolves this vulnerability.Fixed in 1.28.6Patch GStreamer-SA-2026-0072 - Compensating control
If you use playbin/decodebin to process AVI content, restrict/avoid processing of untrusted or crafted AVI files until gst-plugins-good is updated (to prevent application crashes/DoS from the out-of-bounds read in avidemux vprp parsing).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-73434?
The severity of CVE-2026-73434 is rated as high with a severity score of 7.1.
What software is affected by CVE-2026-73434?
CVE-2026-73434 affects the GStreamer gst-plugins-good, specifically in avidemux.
What type of vulnerability is CVE-2026-73434?
CVE-2026-73434 is classified as an out-of-bounds read vulnerability.
How does CVE-2026-73434 occur?
CVE-2026-73434 occurs due to improper calculation of available video field descriptor entries leading to potential memory access issues.
What is the impact of CVE-2026-73434?
The impact of CVE-2026-73434 includes potential denial of service due to crashes from accessing invalid memory.