Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2026-73433

Integer Underflow (Wrap or Wraparound)

Published: Aug 12, 2026 | Modified: Sep 23, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
6.6 MODERATE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-73433
CWEhttps://cwe.mitre.org/data/definitions/191.html

A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 bytes, the counter underflows to a very large unsigned value, causing subsequent null-terminated string scanning to read far beyond the allocated heap buffer. Date-format normalization may also write beyond the buffer end. Confirmed impacts include heap out-of-bounds read, out-of-bounds write, heap information disclosure (adjacent data appearing in parsed metadata), and application crash/denial of service. The avidemux element is auto-plugged by playbin, decodebin, and gst-discoverer, so opening or previewing a crafted AVI is sufficient to trigger the issue. Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072).

Weakness

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Affected Software

NameVendorStart VersionEnd Version
GstreamerGstreamer*1.28.6 (including)
Enterprise_linuxRedhat7.0 (including)7.0 (including)
Enterprise_linuxRedhat8.0 (including)8.0 (including)
Enterprise_linuxRedhat9.0 (including)9.0 (including)
Enterprise_linuxRedhat10.0 (including)10.0 (including)
Red Hat Enterprise Linux 10RedHatgstreamer1-plugins-good-0:1.26.7-2.el10_2.5*
Red Hat Enterprise Linux 10.0 Extended Update SupportRedHatgstreamer1-plugins-good-0:1.24.11-1.el10_0.4*
Red Hat Enterprise Linux 7 Extended Lifecycle SupportRedHatgstreamer1-plugins-good-0:1.10.4-4.el7_9.3*
Red Hat Enterprise Linux 8RedHatgstreamer1-plugins-good-0:1.16.1-7.el8_10.3*
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRedHatgstreamer1-plugins-good-0:1.16.1-4.el8_4.2*
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRedHatgstreamer1-plugins-good-0:1.16.1-4.el8_4.2*
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRedHatgstreamer1-plugins-good-0:1.16.1-4.el8_6.3*
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnRedHatgstreamer1-plugins-good-0:1.16.1-4.el8_6.3*
Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRedHatgstreamer1-plugins-good-0:1.16.1-5.el8_8.3*
Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRedHatgstreamer1-plugins-good-0:1.16.1-5.el8_8.3*
Red Hat Enterprise Linux 9RedHatgstreamer1-plugins-good-0:1.22.12-7.el9_8.4*
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRedHatgstreamer1-plugins-good-0:1.18.4-8.el9_2.3*
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRedHatgstreamer1-plugins-good-0:1.22.1-4.el9_4.3*
Red Hat Enterprise Linux 9.6 Extended Update SupportRedHatgstreamer1-plugins-good-0:1.22.12-5.el9_6.3*
Gst-plugins-good1.0Ubuntuesm-infra-legacy/xenial*
Gst-plugins-good1.0Ubuntuesm-infra/bionic*
Gst-plugins-good1.0Ubuntuesm-infra/focal*
Gst-plugins-good1.0Ubuntujammy*
Gst-plugins-good1.0Ubuntunoble*
Gst-plugins-good1.0Ubunturesolute*
Gst-plugins-good1.0Ubuntuupstream*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use