THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-73433 (MEDIUM 6.6) — A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads

[NVD] CVE-2026-73433 (MEDIUM 6.6) — A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads

lownvdPublished 2026-08-12

CVE-2026-73433 CVSS: 6.6 MEDIUM Published: 2026-08-12T20:17:56.810

A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_demux_parse_strd() decrements a remaining-length counter by fixed offsets (98 and 10 bytes) without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 bytes, the counter underflows

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73433