CLSA-2026-1792239628

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792239628.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792239628
Upstream
CVE (2)
Published
2026-10-23T12:35:17Z
Modified
2026-10-26T09:31:43Z
Summary
gstreamer1-plugins-good: Fix of 2 CVEs
Details
  • CVE-2026-73433: avidemux: fix unsigned integer underflow and out-of-bounds access when parsing FUJIFILM metadata in strd chunks
  • CVE-2026-73434: avidemux: fix out-of-bounds read by using the correct divisor when counting vprp video field descriptors
References

Affected packages

TuxCare:CentOS:7 / gstreamer1-plugins-good

Package

Name
gstreamer1-plugins-good
Purl
pkg:rpm/tuxcare/gstreamer1-plugins-good?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.4-2.0.5.el7.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792239628.json"