CVE Feed

    Dashboard / CVE / CVE-2025-2338

    CVE-2025-2338

    A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdup_vprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

    Published:Mar 16, 2025
    Last Modified:Aug 27, 2025
    EPS:Mar 16, 2025
    EPSS Score:0.00068
    CVSS Score:6.3

    Affected Products

    Vendor
    Matio Project
    Product
    Matio

    Exploits

    https://github.com/tbeu/matio/issues/269https://github.com/tbeu/matio/issues/269#issue-2883920922https://github.com/tbeu/matio/issues/269#issue-2883920922

    Related CVEs

    CVE-2025-50343 (CVSS 9.8) — An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() whe…
    CVE-2025-2337 (CVSS 2.1) — A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the…
    CVE-2022-1515 (CVSS 5.5) — A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted fil…
    CVE-2020-19497 (CVSS 8.8) — Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.…
    CVE-2021-36977 (CVSS 6.5) — matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called fro…
    CVE-2020-36428 (CVSS 8.8) — matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble…
    CVE-2019-20052 (CVSS 6.5) — A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider t…
    CVE-2019-20017 (CVSS 6.5) — A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.…
    CVE-2019-20018 (CVSS 6.5) — A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.…
    CVE-2019-20019 (CVSS 6.5) — An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High