Debian/mkvtoolnix: unknown
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file
Action: Upgrade mkvtoolnix to 92.0-1+deb13u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 92.0-1+deb13u1 | - |
Fixed versions
| 92.0-1+deb13u1 |
Sources
- osv: DEBIAN-CVE-2026-90783#Debian:13/mkvtoolnix
- https://security-tracker.debian.org/tracker/CVE-2026-90783
published · modified · JSON