Matio
CVE-2019-13107
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c
AnalysisAI
Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Technical ContextAI
This vulnerability is classified as Integer Overflow (CWE-190), which allows attackers to cause unexpected behavior through arithmetic overflow. Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c Affected products include: Matio Project Matio, Fedoraproject Fedora. Version information: before 1.5.16.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Validate arithmetic operations, use safe integer libraries, check bounds before allocation.
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated critical severity (CVSS 9.1), th
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated critical severity (CVSS 9.1), th
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated critical severity (CVSS 9.1), th
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated critical severity (CVSS 9.1), th
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated critical severity (CVSS 9.1), th
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated critical severity (CVSS 9.1), th
Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated high severity (CVSS 7.5), this v
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated high severity (CVSS 7.5), this v
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated high severity (CVSS 7.5), this v
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated high severity (CVSS 7.5), this v
An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. Rated high severity (CVSS 7.5), this v
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Integer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today