Search CVE reports
1 – 10 of 24 results
CVE-2022-1515
Medium prioritySome fixes available 2 of 7
A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in DoS.
1 affected packages
libmatio
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | Not affected | Fixed | Fixed | Needs evaluation | Needs evaluation |
CVE-2020-19497
Medium priorityInteger overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.
1 affected packages
libmatio
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Needs evaluation |
CVE-2021-36977
Medium prioritymatio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry), related to use of HDF5 1.12.0.
1 affected packages
libmatio
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2020-36428
Medium prioritymatio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
1 affected packages
libmatio
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
CVE-2019-20052
Medium priorityA memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider the rank==0 case.
1 affected packages
libmatio
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | — | — | Not affected | Not affected | Not affected |
CVE-2019-20020
Medium priorityA stack-based buffer over-read was discovered in ReadNextStructField in mat5.c in matio 1.5.17.
1 affected packages
libmatio
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | Not affected | Not affected | Vulnerable | Vulnerable | Vulnerable |
CVE-2019-20019
Medium priorityAn attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.
1 affected packages
libmatio
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
CVE-2019-20018
Medium priorityA stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.
1 affected packages
libmatio
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | Not affected | Not affected | Vulnerable | Vulnerable | Vulnerable |
CVE-2019-20017
Medium priorityA stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.
1 affected packages
libmatio
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | Not affected | Not affected | Vulnerable | Vulnerable | Vulnerable |
CVE-2019-17533
Medium prioritySome fixes available 4 of 24
Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed.
3 affected packages
libmatio, libpdl-io-matlab-perl, mldemos
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libmatio | Not affected | Not affected | Fixed | Fixed | Fixed |
| libpdl-io-matlab-perl | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| mldemos | Not in release | Not in release | Needs evaluation | Not in release | Needs evaluation |