MatVarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdupvprintf when uninitialized memory is accessed.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17533.json"
[
{
"source": "https://github.com/tbeu/matio/commit/651a8e28099edb5fbb9e4e1d4d3238848f446c9a",
"digest": {
"length": 3298.0,
"function_hash": "205811938888553217331842022420426854759"
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "src/mat4.c",
"function": "Mat_VarReadNextInfo4"
},
"id": "CVE-2019-17533-1307ee52"
},
{
"source": "https://github.com/tbeu/matio/commit/651a8e28099edb5fbb9e4e1d4d3238848f446c9a",
"digest": {
"line_hashes": [
"7059400987733087616963799308465528228",
"172194048184740837147706244096207367441",
"11008142120288460047478546057630470305",
"118363409637962522163582127842591436849"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "src/mat4.c"
},
"id": "CVE-2019-17533-730e9293"
}
]