CVE Feed

    Dashboard / CVE / CVE-2019-20018

    CVE-2019-20018

    A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.

    Published:Dec 27, 2019
    Last Modified:Nov 21, 2024
    EPS:Dec 27, 2019
    EPSS Score:0.00405
    CVSS Score:6.5

    Affected Products

    Vendor
    Matio Project
    Product
    Matio

    Exploits

    https://github.com/tbeu/matio/issues/129https://github.com/tbeu/matio/issues/129

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2025-50343 (CVSS 9.8) — An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() whe…
    CVE-2025-2338 (CVSS 2.1) — A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function st…
    CVE-2025-2337 (CVSS 2.1) — A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the…
    CVE-2022-1515 (CVSS 5.5) — A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted fil…
    CVE-2020-19497 (CVSS 8.8) — Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.…
    CVE-2021-36977 (CVSS 6.5) — matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called fro…
    CVE-2020-36428 (CVSS 8.8) — matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble…
    CVE-2019-20052 (CVSS 6.5) — A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider t…
    CVE-2019-20017 (CVSS 6.5) — A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.…
    CVE-2019-20019 (CVSS 6.5) — An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High