{"action":"Upgrade mkvtoolnix to 101.0-2 or later.","affected":[{"fixed":"101.0-2","introduced":"0"}],"component":"mkvtoolnix","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["101.0-2"],"id":"tcs_01M5NWJV2JKDZ4CSW40PMKGCX6","modified_at":"2026-10-01T08:47:31.067687477Z","published_at":"2026-09-13T13:16:29.560Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-90783","https://security-tracker.debian.org/tracker/CVE-2026-90783"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-90783#Debian:14/mkvtoolnix","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-90783"}],"summary":"MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file"}