CVE Feed

    Dashboard / CVE / CVE-2025-50343

    CVE-2025-50343

    An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

    Published:Dec 30, 2025
    Last Modified:Jan 9, 2026
    EPS:Dec 30, 2025
    EPSS Score:0.00056
    CVSS Score:9.8

    Affected Products

    Vendor
    Matio Project
    Product
    Matio

    Exploits

    https://github.com/tbeu/matio/issues/275https://github.com/zakkanijia/POC/blob/main/matio/CVE-2025-50343/matio.mdhttps://github.com/tbeu/matio/issues/275https://github.com/zakkanijia/POC/blob/main/matio/CVE-2025-50343/matio.md

    Common Weakness Enumeration

    CWE-122 Heap-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2025-2338 (CVSS 2.1) — A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function st…
    CVE-2025-2337 (CVSS 2.1) — A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the…
    CVE-2022-1515 (CVSS 5.5) — A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted fil…
    CVE-2020-19497 (CVSS 8.8) — Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.…
    CVE-2021-36977 (CVSS 6.5) — matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called fro…
    CVE-2020-36428 (CVSS 8.8) — matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble…
    CVE-2019-20052 (CVSS 6.5) — A memory leak was discovered in Mat_VarCalloc in mat.c in matio 1.5.17 because SafeMulDims does not consider t…
    CVE-2019-20017 (CVSS 6.5) — A stack-based buffer over-read was discovered in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.…
    CVE-2019-20018 (CVSS 6.5) — A stack-based buffer over-read was discovered in ReadNextCell in mat5.c in matio 1.5.17.…
    CVE-2019-20019 (CVSS 6.5) — An attempted excessive memory allocation was discovered in Mat_VarRead5 in mat5.c in matio 1.5.17.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High