CVE-2025-50343: An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual…

critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	libmatio	< libmatio 1.5.19-2+deb11u1 (bullseye)	libmatio 1.5.19-2+deb11u1 (bullseye)
matio_project	matio	—	—

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

osv9.8CRITICAL