diff --git a/gstreamer1-plugins-good-1.26.7-CVE-2026-73434.patch b/gstreamer1-plugins-good-1.26.7-CVE-2026-73434.patch
new file mode 100644
index 0000000..0a1e26c
--- /dev/null
+++ b/gstreamer1-plugins-good-1.26.7-CVE-2026-73434.patch
@@ -0,0 +1,27 @@
+From 7cd0c43703af77c9cb7b5c2028c9b86227f857e5 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Sebastian=20Dr=C3=B6ge?= <sebastian@centricular.com>
+Date: Tue, 14 Jul 2026 12:35:12 +0300
+Subject: [PATCH] avidemux: Use correct divisor for calculating available
+ number of vprp field infos
+
+Fixes https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5213
+
+Part-of: <https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12231>
+---
+ subprojects/gst-plugins-good/gst/avi/gstavidemux.c | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/subprojects/gst-plugins-good/gst/avi/gstavidemux.c b/subprojects/gst-plugins-good/gst/avi/gstavidemux.c
+index 82d5d4857c..3a85909eb0 100644
+--- a/subprojects/gst-plugins-good/gst/avi/gstavidemux.c
++++ b/subprojects/gst-plugins-good/gst/avi/gstavidemux.c
+@@ -1808,7 +1808,8 @@ gst_avi_demux_riff_parse_vprp (GstElement * element,
+ 
+   /* size checking */
+   /* calculate fields based on size */
+-  k = (size - G_STRUCT_OFFSET (gst_riff_vprp, field_info)) / vprp->fields;
++  k = (size - G_STRUCT_OFFSET (gst_riff_vprp,
++          field_info)) / sizeof (vprp->field_info[0]);
+   if (vprp->fields > k) {
+     GST_WARNING_OBJECT (element,
+         "vprp header indicated %d fields, only %d available", vprp->fields, k);
diff --git a/gstreamer1-plugins-good.spec b/gstreamer1-plugins-good.spec
index 0d8697c..6a3b8a7 100644
--- a/gstreamer1-plugins-good.spec
+++ b/gstreamer1-plugins-good.spec
@@ -35,7 +35,7 @@
 
 Name:           gstreamer1-plugins-good
 Version:        1.26.7
-Release:        5%{?dist}
+Release:        6%{?dist}
 Summary:        GStreamer plugins with good code and licensing
 
 License:        CC0-1.0 AND GPL-2.0-only AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND xlock AND MIT AND BSD-3-Clause AND CC-BY-3.0 
@@ -62,6 +62,8 @@ Patch:		gstreamer1-plugins-good-1.26.7-CVE-2026-53705.patch
 Patch:		gstreamer1-plugins-good-1.26.7-CVE-2026-18649.patch
 # https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11242
 Patch:		gstreamer1-plugins-good-1.26.7-CVE-2026-5056.patch
+# https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/12231
+Patch:		gstreamer1-plugins-good-1.26.7-CVE-2026-73434.patch
 
 BuildRequires:  meson >= 0.48.0
 BuildRequires:  gcc
@@ -382,6 +384,10 @@ find $RPM_BUILD_ROOT -name '*.la' -exec rm -fv {} ';'
 
 
 %changelog
+* Mon Aug 17 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.26.7-6
+- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
+  Resolves: RHEL-239041
+
 * Tue Aug 11 2026 RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.26.7-5
 - Fix CVE-2026-5056: bounds checks in qtdemux uncompressed video
   Resolves: RHEL-222332