Mkvtoolnix Through 101.0 Heap Buffer Overflow Via Avilib Odml Superindex Integer Wraparound

Back www.vulncheck.com

Mkvtoolnix Through 101.0 Heap Buffer Overflow Via Avilib Odml Superindex Integer Wraparound

www.vulncheck.com • September 14, 2026

Share: View original

MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound

CWE-680 Integer Overflow to Buffer Overflow

Unchecked video superindex allocation in avi_parse_input_file() at release-101.0

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE-2026-90783: MKVToolNix Buffer Overflow Vulnerability A heap buffer overflow vulnerability has been identified in MKVToolNix versions up to 101.0, stemming from an integer wraparound in the avilib library's ODML superindex parser. Attackers can exploit this flaw by crafting malicious AVI files, which may lead to application crashes and potential code execution with user privileges. The vulnerability affects analysts, content teams, and developers who handle untrusted video files. Exploitation does not require application privileges, but user interaction is necessary. Immediate remediation is advised, as the vulnerability has been published as CVE-2026-90783 on September 13, 2026. Monitoring for unusual application behavior and applying vendor patches are critical steps for affected organizations. 2 sources 61

Extracted Entities

Platforms (1)

Vulnerabilities (1)

Buffer overflow