Threats Tagged 'cve-2026-73433'

A vulnerability in the GStreamer gst-plugins-good package affects the rtph264depay and rtph265depay RTP depayloader elements. These elements do not enforce a maximum size limit on the reassembly buffer during fragmented RTP packet processing, allowing a remote unauthenticated attacker to cause unbounded memory growth and denial of service. The vulnerability is exploitable when processing RTP from untrusted sources without authentication. Mitigations include using authenticated RTP transport (SRTP or DTLS-SRTP), network-level restrictions, or disabling the vulnerable RTP plugins. A patch is available from Red Hat.

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write (CVE-2026-73433) * gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVE-2026-73434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write (CVE-2026-73433) * gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing (CVE-2026-73434) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A vulnerability in GStreamer's gst-plugins-good (avidemux) component allows crafted AVI files with specific FUJIFILM metadata to cause heap out-of-bounds reads and writes. This occurs due to an unsigned integer underflow in the gst_avi_demux_parse_strd() function when parsing certain strd payloads, leading to memory corruption and potential application crashes. The flaw affects versions prior to 1.28.6 and has a CVSS score of 6.6 (medium severity).

A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 bytes, the counter underflows to a very large unsigned value, causing subsequent null-terminated string scanning to read far beyond the allocated heap buffer. Date-format normalization may also write beyond the buffer end. Confirmed impacts include heap out-of-bounds read, out-of-bounds write, heap information disclosure (adjacent data appearing in parsed metadata), and application crash/denial of service. The avidemux element is auto-plugged by playbin, decodebin, and gst-discoverer, so opening or previewing a crafted AVI is sufficient to trigger the issue. Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072).