CVE-2019-17533 | BDVDB-2026-124302 Detail

Description#

Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/tbeu/matio/commit/651a8e28099edb5fbb9e4e1d4d3238848f446c9a
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16856
https://lists.debian.org/debian-lts-announce/2020/06/msg00037.html

Exploit#

No public exploit known

History#

Version 12019-10-13Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.