Matio Project Matio vulnerabilities

CVE-2025-50343 [CRITICAL] CWE-122 CVE-2025-50343: An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateSt An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

CVE-2025-2337 [HIGH] CWE-119 CVE-2025-2337: A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue a A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2019-13107 [CRITICAL] CWE-190 CVE-2019-13107: Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

CVE-2025-2338 [HIGH] CWE-119 CVE-2025-2338: A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the f A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdup_vprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2019-9037 [CRITICAL] CWE-125 CVE-2019-9037: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer over-read in the function Mat_VarPrint() in mat.c.

CVE-2020-36428 [HIGH] CWE-787 CVE-2020-36428: matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32 matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).

CVE-2019-9033 [CRITICAL] CWE-125 CVE-2019-9033: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-b An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell() in mat5.c.

CVE-2019-9035 [CRITICAL] CWE-125 CVE-2019-9035: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-b An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField() in mat5.c.

CVE-2019-9030 [CRITICAL] CWE-125 CVE-2019-9030: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-b An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in Mat_VarReadNextInfo5() in mat5.c.

CVE-2019-9028 [CRITICAL] CWE-125 CVE-2019-9028: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-b An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDimensions() in inflate.c when called from ReadNextCell in mat5.c.

CVE-2019-9034 [CRITICAL] CWE-125 CVE-2019-9034: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-b An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell() in mat5.c.

CVE-2019-17533 [HIGH] CWE-125 CVE-2019-17533: Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-bas Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed.

CVE-2019-9032 [HIGH] CWE-787 CVE-2019-9032: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds write problem causing a SEGV in the function Mat_VarFree() in mat.c.

CVE-2019-9029 [HIGH] CWE-125 CVE-2019-9029: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read with a SEGV in the function Mat_VarReadNextInfo5() in mat5.c.

CVE-2019-9036 [HIGH] CWE-787 CVE-2019-9036: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-ba An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle() in mat5.c.

CVE-2019-9038 [HIGH] CWE-125 CVE-2019-9038: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell() in mat5.c.

CVE-2019-9026 [HIGH] CWE-787 CVE-2019-9026: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-ba An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function InflateVarName() in inflate.c when called from ReadNextCell in mat5.c.

CVE-2019-9027 [HIGH] CWE-787 CVE-2019-9027: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-ba An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow problem in the function ReadNextCell() in mat5.c.

CVE-2020-19497 [HIGH] CWE-190 CVE-2020-19497: Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Lib Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.

CVE-2019-9031 [HIGH] CWE-476 CVE-2019-9031: An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a NULL po An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a NULL pointer dereference in the function Mat_VarFree() in mat.c.