Vulnerability Spotlight: Talos-2018-0694 - MKVTool Nix mkvinfo read_one_element Code Execution Vulnerability
Summary: Cisco Talos researchers Piotr Bania, Cory Duplantis and Martin Zeiser found a use-after-free vulnerability in MKVToolNix's mkvinfo parser, which reads Matroska files across Linux, Windows and other operating systems. When the parser reads an element with no valid value it deletes the element but still passes the value back to the calling function without validation, so a forged file can cause one free and then a second delete operation that triggers the use-after-free.
Why it matters: The flaw sits in mkvinfo, a tool for inspecting MKV, MK3D, MKA and MKS files, so a crafted multimedia file is enough to reach it - and the same parser logic is what any downstream system inspecting Matroska content would rely on.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026