Debian/mkvtoolnix: unknown
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file
Action: Upgrade mkvtoolnix to 74.0.0-1+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 74.0.0-1+deb12u1 | - |
Fixed versions
| 74.0.0-1+deb12u1 |
Sources
published · modified · JSON