Out-of-Bounds Read Vulnerability in GStreamer Affected by Nikon Metadata Parser
CVE-2026-73471

6.1MEDIUM

Key Information:

Vendor

Gstreamer

Status
Gst-plugins-good
Vendor
CVE Published:
6 November 2026

What is CVE-2026-73471?

A flaw in the GStreamer gst-plugins-good package, specifically in the Nikon metadata tag parser, allows for a pointer to be dereferenced without ensuring that sufficient data remains in the buffer. This oversight can lead to out-of-bounds read occurrences when a specially crafted AVI file is opened or previewed. Because avidemux is automatically integrated by components such as playbin, decodebin, and gst-discoverer, the vulnerability can be easily exploited by end-users. An upstream fix has been released in version 1.28.6, offering resolution to this issue.

Affected Version(s)

gst-plugins-good 0 < 1.28.6

References

https://access.redhat.com/security/cve/CVE-2026-73471
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2514821
issue-trackingx_refsource_REDHAT
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merg...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Seonwook Kim for reporting this issue.
.