Threats tagged 'ghsa-x9xf-h66v-mjmc'

MKVToolNix versions up to and including 101.0 contain a heap buffer overflow vulnerability in the bundled avilib library's ODML superindex parser. This occurs due to an integer overflow in 32-bit arithmetic that leads to an undersized heap allocation. An attacker can exploit this by crafting a malicious AVI file with an oversized entry count, causing a heap buffer overflow when parsed by mkvmerge.