Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-73434

Fixed in a distro release EPSS <1%CVSS 6.1

A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available gst_riff_vprp_video_field_desc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp->fields value, rather than by sizeof(gst_riff_vprp_video_field_desc). This can cause the parser to treat more field descriptors as available than fit in the input buffer, resulting in out-of-bounds reads. Processing a crafted AVI via playbin/decodebin can crash the application (denial of service). Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072).

Published 2026-08-12 · CVE record · OSV

Products: GStreamer gst-plugins-good, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support

Distro releases

ReleasePackageFixed in
AlmaLinux 10gstreamer1-plugins-good1.26.7-2.el10_2.5
AlmaLinux 10gstreamer1-plugins-good-gtk1.26.7-2.el10_2.5
AlmaLinux 8gstreamer1-plugins-good1.16.1-7.el8_10.3
AlmaLinux 8gstreamer1-plugins-good-gtk1.16.1-7.el8_10.3
AlmaLinux 9gstreamer1-plugins-good1.22.12-7.el9_8.4
AlmaLinux 9gstreamer1-plugins-good-gtk1.22.12-7.el9_8.4
Debian 12gst-plugins-good1.01.22.0-5+deb12u4
Debian 13gst-plugins-good1.0no fix
Debian 14gst-plugins-good1.01.28.6-1
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good0:1.26.7-2.el10_2.5
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-debuginfo0:1.26.7-2.el10_2.5
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-debugsource0:1.26.7-2.el10_2.5
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-gtk0:1.26.7-2.el10_2.5
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-gtk-debuginfo0:1.26.7-2.el10_2.5
Red Hat Enterprise Linux 10.2gstreamer1-plugins-good-qt6-debuginfo0:1.26.7-2.el10_2.5
Red Hat Enterprise Linux 8gstreamer1-plugins-good0:1.16.1-7.el8_10.3
Red Hat Enterprise Linux 8gstreamer1-plugins-good-debuginfo0:1.16.1-7.el8_10.3
Red Hat Enterprise Linux 8gstreamer1-plugins-good-debugsource0:1.16.1-7.el8_10.3
Red Hat Enterprise Linux 8gstreamer1-plugins-good-gtk0:1.16.1-7.el8_10.3
Red Hat Enterprise Linux 8gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-7.el8_10.3
Red Hat Enterprise Linux 9gstreamer1-plugins-good0:1.22.12-7.el9_8.4
Red Hat Enterprise Linux 9gstreamer1-plugins-good-debuginfo0:1.22.12-7.el9_8.4
Red Hat Enterprise Linux 9gstreamer1-plugins-good-debugsource0:1.22.12-7.el9_8.4
Red Hat Enterprise Linux 9gstreamer1-plugins-good-gtk0:1.22.12-7.el9_8.4
Red Hat Enterprise Linux 9gstreamer1-plugins-good-gtk-debuginfo0:1.22.12-7.el9_8.4
Red Hat Enterprise Linux 9gstreamer1-plugins-good-qt-debuginfo0:1.22.12-7.el9_8.4
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good0:1.24.11-1.el10_0.4
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-debuginfo0:1.24.11-1.el10_0.4
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-debugsource0:1.24.11-1.el10_0.4
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-gtk0:1.24.11-1.el10_0.4
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-gtk-debuginfo0:1.24.11-1.el10_0.4
Red Hat Enterprise Linux eus 10.0gstreamer1-plugins-good-qt6-debuginfo0:1.24.11-1.el10_0.4
Red Hat rhel aus 8.4gstreamer1-plugins-good0:1.16.1-4.el8_4.2
Red Hat rhel aus 8.4gstreamer1-plugins-good-debuginfo0:1.16.1-4.el8_4.2
Red Hat rhel aus 8.4gstreamer1-plugins-good-debugsource0:1.16.1-4.el8_4.2
Red Hat rhel aus 8.4gstreamer1-plugins-good-gtk0:1.16.1-4.el8_4.2
Red Hat rhel aus 8.4gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-4.el8_4.2
Red Hat rhel aus 8.6gstreamer1-plugins-good0:1.16.1-4.el8_6.3
Red Hat rhel aus 8.6gstreamer1-plugins-good-debuginfo0:1.16.1-4.el8_6.3
Red Hat rhel aus 8.6gstreamer1-plugins-good-debugsource0:1.16.1-4.el8_6.3
Red Hat rhel aus 8.6gstreamer1-plugins-good-gtk0:1.16.1-4.el8_6.3
Red Hat rhel aus 8.6gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-4.el8_6.3
Red Hat rhel e4s 8.8gstreamer1-plugins-good0:1.16.1-5.el8_8.3
Red Hat rhel e4s 8.8gstreamer1-plugins-good-debuginfo0:1.16.1-5.el8_8.3
Red Hat rhel e4s 8.8gstreamer1-plugins-good-debugsource0:1.16.1-5.el8_8.3
Red Hat rhel e4s 8.8gstreamer1-plugins-good-gtk0:1.16.1-5.el8_8.3
Red Hat rhel e4s 8.8gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-5.el8_8.3
Red Hat rhel e4s 9.2gstreamer1-plugins-good0:1.18.4-8.el9_2.3
Red Hat rhel e4s 9.2gstreamer1-plugins-good-debuginfo0:1.18.4-8.el9_2.3
Red Hat rhel e4s 9.2gstreamer1-plugins-good-debugsource0:1.18.4-8.el9_2.3
Red Hat rhel e4s 9.2gstreamer1-plugins-good-gtk0:1.18.4-8.el9_2.3
Red Hat rhel e4s 9.2gstreamer1-plugins-good-gtk-debuginfo0:1.18.4-8.el9_2.3
Red Hat rhel e4s 9.2gstreamer1-plugins-good-qt-debuginfo0:1.18.4-8.el9_2.3
Red Hat rhel e4s 9.4gstreamer1-plugins-good0:1.22.1-4.el9_4.3
Red Hat rhel e4s 9.4gstreamer1-plugins-good-debuginfo0:1.22.1-4.el9_4.3
Red Hat rhel e4s 9.4gstreamer1-plugins-good-debugsource0:1.22.1-4.el9_4.3
Red Hat rhel e4s 9.4gstreamer1-plugins-good-gtk0:1.22.1-4.el9_4.3
Red Hat rhel e4s 9.4gstreamer1-plugins-good-gtk-debuginfo0:1.22.1-4.el9_4.3
Red Hat rhel e4s 9.4gstreamer1-plugins-good-qt-debuginfo0:1.22.1-4.el9_4.3
Red Hat rhel els 7gstreamer1-plugins-good0:1.10.4-4.el7_9.3
Red Hat rhel els 7gstreamer1-plugins-good-debuginfo0:1.10.4-4.el7_9.3
Red Hat rhel eus 9.6gstreamer1-plugins-good0:1.22.12-5.el9_6.3
Red Hat rhel eus 9.6gstreamer1-plugins-good-debuginfo0:1.22.12-5.el9_6.3
Red Hat rhel eus 9.6gstreamer1-plugins-good-debugsource0:1.22.12-5.el9_6.3
Red Hat rhel eus 9.6gstreamer1-plugins-good-gtk0:1.22.12-5.el9_6.3
Red Hat rhel eus 9.6gstreamer1-plugins-good-gtk-debuginfo0:1.22.12-5.el9_6.3
Red Hat rhel eus 9.6gstreamer1-plugins-good-qt-debuginfo0:1.22.12-5.el9_6.3
Red Hat rhel eus long life 8.4gstreamer1-plugins-good0:1.16.1-4.el8_4.2
Red Hat rhel eus long life 8.4gstreamer1-plugins-good-debuginfo0:1.16.1-4.el8_4.2
Red Hat rhel eus long life 8.4gstreamer1-plugins-good-debugsource0:1.16.1-4.el8_4.2
Red Hat rhel eus long life 8.4gstreamer1-plugins-good-gtk0:1.16.1-4.el8_4.2
Red Hat rhel eus long life 8.4gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-4.el8_4.2
Red Hat rhel eus long life 8.6gstreamer1-plugins-good0:1.16.1-4.el8_6.3
Red Hat rhel eus long life 8.6gstreamer1-plugins-good-debuginfo0:1.16.1-4.el8_6.3
Red Hat rhel eus long life 8.6gstreamer1-plugins-good-debugsource0:1.16.1-4.el8_6.3
Red Hat rhel eus long life 8.6gstreamer1-plugins-good-gtk0:1.16.1-4.el8_6.3
Red Hat rhel eus long life 8.6gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-4.el8_6.3
Red Hat rhel tus 8.8gstreamer1-plugins-good0:1.16.1-5.el8_8.3
Red Hat rhel tus 8.8gstreamer1-plugins-good-debuginfo0:1.16.1-5.el8_8.3
Red Hat rhel tus 8.8gstreamer1-plugins-good-debugsource0:1.16.1-5.el8_8.3
Red Hat rhel tus 8.8gstreamer1-plugins-good-gtk0:1.16.1-5.el8_8.3
Red Hat rhel tus 8.8gstreamer1-plugins-good-gtk-debuginfo0:1.16.1-5.el8_8.3
Rocky Linux 10gstreamer1-plugins-good0:1.26.7-2.el10_2.5
Rocky Linux 8gstreamer1-plugins-good0:1.16.1-7.el8_10.3
Rocky Linux 9gstreamer1-plugins-good0:1.22.12-7.el9_8.4
Ubuntu 22.04 LTSgst-plugins-good1.01.20.3-0ubuntu1.10
Ubuntu 24.04 LTSgst-plugins-good1.01.24.2-1ubuntu1.8
Ubuntu 26.04 LTSgst-plugins-good1.01.28.2-2ubuntu0.4
Ubuntu Pro 16.04 LTSgst-plugins-good1.01.8.3-1ubuntu0.5+esm4
Ubuntu Pro 18.04 LTSgst-plugins-good1.01.14.5-0ubuntu1~18.04.3+esm4
Ubuntu Pro 20.04 LTSgst-plugins-good1.01.16.3-0ubuntu1.3+esm4