{"action":"Upgrade mkvtoolnix to 92.0-1+deb13u1 or later.","affected":[{"fixed":"92.0-1+deb13u1","introduced":"0"}],"component":"mkvtoolnix","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["92.0-1+deb13u1"],"id":"tcs_01M5NWJTZB3K0MXJCF0CN0F30N","modified_at":"2026-10-01T08:47:31.067687477Z","published_at":"2026-09-13T13:16:29.560Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-90783","https://security-tracker.debian.org/tracker/CVE-2026-90783"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-90783#Debian:13/mkvtoolnix","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-90783"}],"summary":"MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file"}