CVE Feed

    Dashboard / CVE / CVE-2020-19497

    CVE-2020-19497

    Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.

    Published:Jul 21, 2021
    Last Modified:Nov 21, 2024
    EPS:Jul 21, 2021
    EPSS Score:0.00371
    CVSS Score:8.8

    Affected Products

    Vendor
    Matio Project
    Product
    Matio

    Exploits

    https://github.com/tbeu/matio/issues/121https://github.com/tbeu/matio/issues/121

    Common Weakness Enumeration

    CWE-190 Integer Overflow or Wraparound

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2025-50343 (CVSS 9.8) — An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() whe…
    CVE-2025-2338 (CVSS 2.1) — A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function st…
    CVE-2025-2337 (CVSS 2.1) — A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the…
    CVE-2022-1515 (CVSS 5.5) — A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted fil…
    CVE-2021-36977 (CVSS 6.5) — matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called fro…
    CVE-2020-36428 (CVSS 8.8) — matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble…
    CVE-2019-20052 (CVSS 6.5) — A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider t…
    CVE-2019-20017 (CVSS 6.5) — A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.…
    CVE-2019-20018 (CVSS 6.5) — A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.…
    CVE-2019-20019 (CVSS 6.5) — An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High