Vendor
MKVToolNix versions up to 101.0 are vulnerable to a heap buffer overflow in the avilib library, potentially allowing arbitrary code execution when processing crafted AVI files.