Mkvtoolnix
Monthly
Heap buffer overflow in MKVToolNix through 101.0 allows code execution when a victim processes a crafted AVI file with mkvmerge. The bundled avilib 0.6.10 library's ODML superindex parser performs 32-bit size arithmetic on attacker-controlled entry counts, producing an integer wraparound (CWE-680) that causes an undersized heap allocation; subsequent data writes overflow the buffer. An attacker who delivers a malicious AVI file and induces a user or automated pipeline to process it with mkvmerge can achieve arbitrary code execution with user-level privileges. No public exploit has been identified and no KEV listing exists, but a patch commit is available on Codeberg.
Heap buffer overflow in MKVToolNix through 101.0 allows code execution when a victim processes a crafted AVI file with mkvmerge. The bundled avilib 0.6.10 library's ODML superindex parser performs 32-bit size arithmetic on attacker-controlled entry counts, producing an integer wraparound (CWE-680) that causes an undersized heap allocation; subsequent data writes overflow the buffer. An attacker who delivers a malicious AVI file and induces a user or automated pipeline to process it with mkvmerge can achieve arbitrary code execution with user-level privileges. No public exploit has been identified and no KEV listing exists, but a patch commit is available on Codeberg.