CVE detail
CVE-2026-73433
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 bytes, the counter underflows to a very large unsigned value, causing subsequent null-terminated string scanning to read far beyond the allocated heap buffer. Date-format normalization may also write beyond the buffer end. Confirmed impacts include heap out-of-bounds read, out-of-bounds write, heap information disclosure (adjacent data appearing in parsed metadata), and application crash/denial of service. The avidemux element is auto-plugged by playbin, decodebin, and gst-discoverer, so opening or previewing a crafted AVI is sufficient to trigger the issue. Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072).
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 13.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 6
- within the 30d window
- Peak daily
- 6
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- https://access.redhat.com/errata/RHSA-2026:55436access.redhat.com
No excerpt available.
Exploitaccess.redhat.comAug 12, 2026, 8:17 PM - https://access.redhat.com/errata/RHSA-2026:55434access.redhat.com
No excerpt available.
Exploitaccess.redhat.comAug 12, 2026, 8:17 PM - https://gstreamer.freedesktop.org/security/sa-2026-0072.htmlgstreamer.freedesktop.org
No excerpt available.
Vendor Advisorygstreamer.freedesktop.orgAug 12, 2026, 8:17 PM - https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12231gitlab.freedesktop.org
No excerpt available.
Exploitgitlab.freedesktop.orgAug 12, 2026, 8:17 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2514801bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comAug 12, 2026, 8:17 PM - https://access.redhat.com/security/cve/CVE-2026-73433access.redhat.com
No excerpt available.
Exploitaccess.redhat.comAug 12, 2026, 8:17 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-58016CVSS 7.5 · High
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML,…
- CVE-2026-11789CVSS 4.9 · Medium
A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than…
- CVE-2026-33845CVSS 7.5 · High
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-…
- CVE-2026-3084CVSS 7.8 · High
GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations…
- CVE-2024-47606CVSS 8.6 · High
GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c…
- CVE-2024-47546CVSS 6.9 · Medium
GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in extract_cc_from_data function within qtdemux.c. In the FOURC…