The vulnerability (CVE-2026-73434) exists in the gst_avi_demux_riff_parse_vprp() function of GStreamer gst-plugins-good (avidemux). The number of available gst_riff_vprp_video_field_desc entries is incorrectly calculated by dividing the remaining buffer size by an attacker-controlled value (vprp->fields) instead of by sizeof(gst_riff_vprp_video_field_desc). This miscalculation leads to out-of-bounds reads, which can cause the application to crash when processing crafted AVI files via playbin/decodebin. The issue is fixed upstream in gst-plugins-good 1.28.6 and addressed in Red Hat Enterprise Linux 10 security updates.

The vulnerability can cause denial of service by crashing applications that process specially crafted AVI files using GStreamer playbin or decodebin. The CVSS score is 7.1 (high severity) with network attack vector, low attack complexity, no privileges required, user interaction required, and impact limited to availability.

A fix is available in gst-plugins-good version 1.28.6. Red Hat has released security updates for Red Hat Enterprise Linux 10 to address this issue. Users should apply the official patches provided by their vendor. No additional mitigation actions are required beyond applying the update.