High severity7.8NVD Advisory· Published Sep 13, 2026· Updated Sep 30, 2026
CVE-2026-90783
CVE-2026-90783
Description
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer overflow when the file is parsed with mkvmerge.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: 0.6.10
- Range: <=101.0
- osv-coords2 versionspkg:rpm/opensuse/mkvtoolnix&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/mkvtoolnix&distro=openSUSE%20Tumbleweed
< 95.0-bp160.2.1+ 1 more
- (no CPE)range: < 95.0-bp160.2.1
- (no CPE)range: < 101.0-2.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.