{"action":"Upgrade mkvtoolnix to 99.0-r1 or later.","affected":[{"fixed":"99.0-r1","introduced":"0"}],"component":"mkvtoolnix","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.24","exploited":false,"fixed_versions":["99.0-r1"],"id":"tcs_01M6HAWWGPVZA12BTBRSC32MG2","modified_at":"2026-11-03T06:33:04.409453968Z","published_at":"2026-09-13T13:16:29.560Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2026-90783","https://security.alpinelinux.org/vuln/CVE-2026-90783"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2026-90783","url":"https://osv.dev/vulnerability/ALPINE-CVE-2026-90783"}],"summary":"MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file"}