Memory Allocation Flaw in GStreamer Avidemux Affects Media Playback
CVE-2026-73473

5.5MEDIUM

Key Information:

Vendor

Gstreamer

Status
Gst-plugins-good
Vendor
CVE Published:
6 November 2026

What is CVE-2026-73473?

A flaw exists in GStreamer’s gst-plugins-good related to the subindex parser. This flaw stems from inadequate validation of entry counts, which may result in excessive memory allocation and trigger a denial of service scenario. The vulnerability can be exploited simply by opening or previewing a specially crafted AVI file. This issue has been addressed in the upstream version gst-plugins-good 1.28.6, as documented in GStreamer security advisories.

Affected Version(s)

gst-plugins-good 0 < 1.28.6

References

https://access.redhat.com/security/cve/CVE-2026-73473
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2514915
issue-trackingx_refsource_REDHAT
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merg...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Seonwook Kim for reporting this issue.
.