Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-90783— MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound

Quick assessment

Affected
Moritz Bunkus MKVToolNix
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MKVToolNix 版本 101.0 及之前版本中，其捆绑的 avilib 库的 ODML superindex 解析器中存在堆缓冲区溢出漏洞。该漏洞源于 32 位算术运算中的整数回绕（integer wraparound）。攻击者可以构造一个恶意的 AVI 文件，其中包含过大的条目计数，导致堆内存分配尺寸过小，从而在使用 mkvmerge 解析该文件时触发堆缓冲区溢出。

CVSS 7.8 · High

Possible ATT&CK Techniques 1 AI

T1210 · Exploitation of Remote Services

Affected Version Matrix 2

VendorProduct Version RangeStatus
Moritz Bunkus MKVToolNix ≤ 101.0 affected
1495126138e086080f0163bee27fafbdf956a1d0 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-90783

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound
Source: CVE Program / CVE List V5
Vulnerability Description
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer overflow when the file is parsed with mkvmerge.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数溢出导致缓冲区溢出
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Moritz Bunkus MKVToolNix 0 ~ 101.0 -

II. Public POCs for CVE-2026-90783

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-90783

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-90783 (1)

Vendor Advisories for CVE-2026-90783 (1)

Security Blog Posts for CVE-2026-90783 (1)

Other References for CVE-2026-90783 (1)

IV. Related Vulnerabilities

Same product: MKVToolNix
Same weakness: CWE-680

V. Comments for CVE-2026-90783

No comments yet

Leave a comment