1341 matches found
CVE-2026-70632
A flaw was found in FFmpeg. This out-of-bounds heap write vulnerability exists within the native GoPro CineForm HD CFHD decoder. A remote attacker can exploit this by providing a specially crafted AVI Audio Video Interleave file during stream analysis. This can lead to memory corruption and may b...
Oracle Linux 8 : gstreamer1-plugins-good (ELSA-2026-56966)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56966 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239048 - Fix CVE-2026-18649 in H.264/H.265 RTP depayloaders...
gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-55434)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55434 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 Tenable has extracted the preceding description block...
Oracle Linux 9 : gstreamer1-plugins-good (ELSA-2026-55436)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55436 advisory. - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 Tenable has extracted the preceding description block...
gstreamer1-plugins-good security update
1.26.7-2.5 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239045 1.26.7-2.4 - Fix out-of-bounds reads when parsing FUJIFILM strd metadata in AVI files CVE-2026-73433 Resolves: RHEL-239062...
gstreamer1-plugins-good security update
1.22.12-7.4 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 1.22.12-7.3 - Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata parsing in avidemux to prevent unsigned integer underflow Resolves: RHEL-239060...
CVE-2026-58245
creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:37+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...
CVE-2026-66761
creationtimestamp| type| source ---|---|--- 2026-08-13 08:48:28+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...
CVE-2026-66764
creationtimestamp| type| source ---|---|--- 2026-08-13 08:47:51+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...
CVE-2026-66760
creationtimestamp| type| source ---|---|--- 2026-08-13 08:47:24+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0998...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
DEBIAN-CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
DEBIAN-CVE-2026-73433
A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...
UBUNTU-CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
EUVD-2026-57443
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...