MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer overflow when the file is parsed with mkvmerge.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4805 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4805-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     September 30, 2026                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : mkvtoolnix     Version        : 74.0.0-1+deb12u1     CVE ID         : CVE-2026-90783


    An issue has been found in mkvtoolnix, a set of command-line tools to work     with Matroska files. The issue is related to a heap buffer overflow in     the bundled avilib.

    The only way to avoid this issue is to update the software.


    For Debian 12 bookworm, this problem has been fixed in version     74.0.0-1+deb12u1.

    We recommend that you upgrade your mkvtoolnix packages.

    For the detailed security status of mkvtoolnix please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/mkvtoolnix

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21867-1 advisory.

    Changes in mkvtoolnix:

    - CVE-2026-90783: heap buffer overflow in the bundled avilib library's ODML superindex parser due to     integer wraparound in 32-bit arithmetic (boo#1280126).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a738c927-b216-11f1-bc39-5404a68ad561 advisory.

    Moritz Bunkus reports:
    potential heap overflows/invalid memory access in the ODML index handling due to            unsiged integer multiplication wrapping around (colloquially known as overflowing)            with specifically crafted AVI files. Affects only mkvmerge as the other tools do            not read AVIs

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6502 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6502-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     September 16, 2026                    https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : mkvtoolnix     CVE ID         : CVE-2026-90783

    A buffer overflow was found in the ODML parser of MKVToolNix, a set of     command-line tools (and GUI) to work with Matroska files, which could     potentially result in the execution of arbitrary code when processing     malformed .mkv files.

    For the stable distribution (trixie), this problem has been fixed in     version 92.0-1+deb13u1.

    We recommend that you upgrade your mkvtoolnix packages.

    For the detailed security status of mkvtoolnix please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/mkvtoolnix

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex     parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with     oversized entry counts that cause an undersized heap allocation, allowing a heap buffer overflow when the     file is parsed with mkvmerge. (CVE-2026-90783)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
353342	Debian dla-4805 : mkvtoolnix - security update	Nessus	Debian Local Security Checks	Local	high
347923	openSUSE 16 Security Update : mkvtoolnix (openSUSE-SU-2026:21867-1)	Nessus	SuSE Local Security Checks	Local	high
346905	FreeBSD : mkvtoolnix -- Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound (a738c927-b216-11f1-bc39-5404a68ad561)	Nessus	FreeBSD Local Security Checks	Local	high
346456	Debian dsa-6502 : mkvtoolnix - security update	Nessus	Debian Local Security Checks	Local	high
345556	Linux Distros Unpatched Vulnerability : CVE-2026-90783	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-90783

high

Tenable Plugins

high

high

high

high

high