Description
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 bytes, the counter underflows to a very large unsigned value, causing subsequent null-terminated string scanning to read far beyond the allocated heap buffer. Date-format normalization may also write beyond the buffer end. Confirmed impacts include heap out-of-bounds read, out-of-bounds write, heap information disclosure (adjacent data appearing in parsed metadata), and application crash/denial of service. The avidemux element is auto-plugged by playbin, decodebin, and gst-discoverer, so opening or previewing a crafted AVI is sufficient to trigger the issue. Fixed upstream in gst-plugins-good 1.28.6 (GStreamer-SA-2026-0072).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GStreamer | gst-plugins-good | < 1.28.6 | 1.28.6 |
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | — | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | gst-plugins-good1.0 | 1.28.6-1 | — |
| Debian 13 | gst-plugins-good1.0 | No fix yet | — |
| Debian 12 | gst-plugins-good1.0 | 1.22.0-5+deb12u4 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | gst-plugins-good1.0 | 1.28.2-2ubuntu0.4 | USN-8863-1 |
| Ubuntu 24.04 LTS | gst-plugins-good1.0 | 1.24.2-1ubuntu1.8 | USN-8863-1 |
| Ubuntu 22.04 LTS | gst-plugins-good1.0 | 1.20.3-0ubuntu1.10 | USN-8863-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | gst-plugins-good1.0 | 1.16.3-0ubuntu1.3+esm4 | USN-8863-1 |
| Ubuntu Pro 18.04 LTS | gst-plugins-good1.0 | 1.14.5-0ubuntu1~18.04.3+esm4 | USN-8863-1 |
| Ubuntu Pro 16.04 LTS | gst-plugins-good1.0 | 1.8.3-1ubuntu0.5+esm4 | USN-8863-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | gstreamer1-plugins-good +1 | 1.26.7-2.el10_2.5 | RHSA-2026:55434 |
| RHEL 9 | gstreamer1-plugins-good +1 | 1.22.12-7.el9_8.4 | RHSA-2026:55436 |
| RHEL 8 | gstreamer1-plugins-good +1 | 1.16.1-7.el8_10.3 | RHSA-2026:56966 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | gstreamer1-plugins-good +1 | 1.24.11-1.el10_0.4 | RHSA-2026:65959 |
| RHEL 9.6 EUS | gstreamer1-plugins-good +1 | 1.22.12-5.el9_6.3 | RHSA-2026:68644 |
| RHEL 9.4 E4S | gstreamer1-plugins-good +1 | 1.22.1-4.el9_4.3 | RHSA-2026:68642 |
| RHEL 9.2 E4S | gstreamer1-plugins-good +1 | 1.18.4-8.el9_2.3 | RHSA-2026:68645 |
| RHEL 8.8 TUS | gstreamer1-plugins-good +1 | 1.16.1-5.el8_8.3 | RHSA-2026:69232 |
| RHEL 8.8 E4S | gstreamer1-plugins-good +1 | 1.16.1-5.el8_8.3 | RHSA-2026:69232 |
| RHEL 8.6 EUS Long Life | gstreamer1-plugins-good +1 | 1.16.1-4.el8_6.3 | RHSA-2026:70584 |
| RHEL 8.6 AUS | gstreamer1-plugins-good +1 | 1.16.1-4.el8_6.3 | RHSA-2026:70584 |
| RHEL 8.4 EUS Long Life | gstreamer1-plugins-good +1 | 1.16.1-4.el8_4.2 | RHSA-2026:70803 |
| RHEL 8.4 AUS | gstreamer1-plugins-good +1 | 1.16.1-4.el8_4.2 | RHSA-2026:70803 |
| RHEL 7 ELS | gstreamer1-plugins-good | 1.10.4-4.el7_9.3 | RHSA-2026:70264 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | gstreamer1-plugins-good +1 | 1.26.7-2.el10_2.5 | ALSA-2026:55434 |
| AlmaLinux 9 | gstreamer1-plugins-good +1 | 1.22.12-7.el9_8.4 | ALSA-2026:55436 |
| AlmaLinux 8 | gstreamer1-plugins-good +1 | 1.16.1-7.el8_10.3 | ALSA-2026:56966 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | gstreamer1-plugins-good | 1.26.7-2.el10_2.5 | RLSA-2026:55434 |
| Rocky Linux 9 | gstreamer1-plugins-good | 1.22.12-7.el9_8.4 | RLSA-2026:55436 |
| Rocky Linux 8 | gstreamer1-plugins-good | 1.16.1-7.el8_10.3 | RLSA-2026:56966 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | gstreamer1-plugins-good +1 | 1.24.10-1.amzn2023.0.10 | ALAS2023-2026-3276 |
| Amazon Linux 2 | gstreamer1-plugins-good +1 | 1.18.4-6.amzn2.0.15 | ALAS2-2026-4024 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | gstreamer1-plugins-good +1 | 1.26.7-2.el10_2.5 | ELSA-2026-55434 |
| Oracle Linux 9 | gstreamer1-plugins-good +1 | 1.22.12-7.el9_8.4 | ELSA-2026-55436 |
| Oracle Linux 8 | gstreamer1-plugins-good +1 | 1.16.1-7.el8_10.3 | ELSA-2026-56966 |
Advisories 24
- WID-SEC-2026-2662 GStreamer: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 5, 2026
- ALSA-2026:55436 Moderate: gstreamer1-plugins-good security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:55434 Moderate: gstreamer1-plugins-good security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:56966 Moderate: gstreamer1-plugins-good security update AlmaLinux Security Advisories · Oct 29, 2026
- ALAS2023-2026-3276 Moderate: gstreamer1-plugins-good security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Oct 26, 2026
- ALAS2-2026-4024 Moderate: gstreamer1-plugins-good security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 26, 2026
- RHSA-2026:70803 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2026:70584 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2026:70264 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2026:69232 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2026:65959 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2026:56966 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- USN-8863-1 gst-plugins-good1.0 vulnerabilities Ubuntu Security Notices (USN) · Oct 2, 2026
- RHSA-2026:68645 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Sep 24, 2026
- RHSA-2026:68644 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Sep 24, 2026
- RHSA-2026:68642 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Sep 24, 2026
- RHSA-2026:55436 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Sep 24, 2026
- RHSA-2026:55434 Red Hat Security Advisory: gstreamer1-plugins-good security update Red Hat Security Advisories (RHSA) · Sep 24, 2026
- RLSA-2026:56966 Moderate: gstreamer1-plugins-good security update Rocky Linux Security Advisories · Aug 20, 2026
- ELSA-2026-56966 Moderate: gstreamer1-plugins-good security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Aug 19, 2026
- RLSA-2026:55434 Moderate: gstreamer1-plugins-good security update Rocky Linux Security Advisories · Aug 17, 2026
- RLSA-2026:55436 Moderate: gstreamer1-plugins-good security update Rocky Linux Security Advisories · Aug 17, 2026
- ELSA-2026-55434 Moderate: gstreamer1-plugins-good security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Aug 17, 2026
- ELSA-2026-55436 Moderate: gstreamer1-plugins-good security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 17, 2026
References
- RHSA-2026:55434 vendor-advisory
- RHSA-2026:55436 vendor-advisory
- RHSA-2026:56966 vendor-advisory
- RHSA-2026:65959 vendor-advisory
- RHSA-2026:68642 vendor-advisory
- RHSA-2026:68644 vendor-advisory
- RHSA-2026:68645 vendor-advisory
- RHSA-2026:69232 vendor-advisory
- RHSA-2026:70264 vendor-advisory
- RHSA-2026:70584 vendor-advisory
- RHSA-2026:70803 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-73433 vdb-entry
- RHBZ#2514801 issue-tracking
- https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12231
- https://gstreamer.freedesktop.org/security/sa-2026-0072.html