DLA-4459-1 libmatio - security update
Published
Unknown
Product
debian/libmatio vulnerabilities
28 published CVES affecting debian/libmatio, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 28
- Critical
- 7
- High
- 10
- Medium
- 9
- Low
- 0
- Unscored
- 2
- CISA KEV
- 0
Latest debian/libmatio CVEs
Newest publication first · page 1 of 2
-
-
MediumCVSS 5.3 EPSS 0.56%
A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdup_vprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to t...
-
MediumCVSS 5.3 EPSS 0.60%
A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed t...
-
MediumCVSS 5.5 EPSS 0.70%
A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in DoS.
-
HighCVSS 8.8 EPSS 1.4%
Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
-
MediumCVSS 6.5 EPSS 1.5%
matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry), related to use of HDF5 1.12.0.
-
HighCVSS 8.8 EPSS 1.4%
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
-
DLA-2267-1 libmatio - security update
PublishedUnknown -
MediumCVSS 6.5 EPSS 1.1%
A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==0 case.
-
MediumCVSS 6.5 EPSS 0.86%
A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.
-
MediumCVSS 6.5 EPSS 1.1%
A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.
-
MediumCVSS 6.5 EPSS 0.86%
An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.
-
MediumCVSS 6.5 EPSS 0.91%
A stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.
-
HighCVSS 8.2 EPSS 1.7%
Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed.
-
CriticalCVSS 9.8 EPSS 1.8%
Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c
-
HighCVSS 7.5 EPSS 2.0%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell() in mat5.c.
-
CriticalCVSS 9.1 EPSS 2.3%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer over-read in the function Mat_VarPrint() in mat.c.
-
HighCVSS 7.5 EPSS 2.1%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle() in mat5.c.
-
CriticalCVSS 9.1 EPSS 2.3%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField() in mat5.c.
-
CriticalCVSS 9.1 EPSS 2.0%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell() in mat5.c.
-
CriticalCVSS 9.1 EPSS 2.3%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell() in mat5.c.
-
HighCVSS 7.5 EPSS 1.7%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds write problem causing a SEGV in the function Mat_VarFree() in mat.c.
-
HighCVSS 7.5 EPSS 1.7%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a NULL pointer dereference in the function Mat_VarFree() in mat.c.
-
CriticalCVSS 9.1 EPSS 2.3%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in Mat_VarReadNextInfo5() in mat5.c.
-
HighCVSS 7.5 EPSS 1.7%
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read with a SEGV in the function Mat_VarReadNextInfo5() in mat5.c.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.