CVE-2026-73434

Name of the Vulnerable Software and Affected Versions GStreamer gst-plugins-good versions prior to 1.28.6

Description A flaw exists in the gst avi demux riff parse vprp() function where the number of available gst riff vprp video field desc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp->fields value instead of by the size of the descriptor structure. This logic error allows the parser to identify more field descriptors than are actually present in the input buffer, leading to out-of-bounds reads. An attacker can trigger a denial of service by providing a specially crafted AVI file processed via playbin or decodebin, causing the application to crash.

Recommendations Update to version 1.28.6.