tocsin

Debian/mkvtoolnix: unknown

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file

Action: Upgrade mkvtoolnix to 101.0-2 or later.

Affected

introducedfixedlast affected
0101.0-2-

Fixed versions

101.0-2

Sources

published · modified · JSON