CVE-2019-17533
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2019-17533
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17533.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2019-17533
- Downstream
- Related
- Published
- 2019-10-13T02:15:12Z
- Modified
- 2025-10-21T04:53:39.575943Z
- Severity
-
- 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
MatVarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdupvprintf when uninitialized memory is accessed.
- References
Affected packages
Git / github.com/tbeu/matio
Affected ranges
- Type
- GIT
- Repo
- https://github.com/tbeu/matio
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
v1.*
v1.5.0
v1.5.0b1
v1.5.1
v1.5.10
v1.5.11
v1.5.12
v1.5.13
v1.5.14
v1.5.15
v1.5.16
v1.5.17
v1.5.2
v1.5.4
v1.5.5
v1.5.6
v1.5.7
v1.5.8
v1.5.9
Database specific
vanir_signatures
[
{
"source": "https://github.com/tbeu/matio/commit/651a8e28099edb5fbb9e4e1d4d3238848f446c9a",
"id": "CVE-2019-17533-1307ee52",
"deprecated": false,
"target": {
"function": "Mat_VarReadNextInfo4",
"file": "src/mat4.c"
},
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 3298.0,
"function_hash": "205811938888553217331842022420426854759"
}
},
{
"source": "https://github.com/tbeu/matio/commit/651a8e28099edb5fbb9e4e1d4d3238848f446c9a",
"id": "CVE-2019-17533-730e9293",
"deprecated": false,
"target": {
"file": "src/mat4.c"
},
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"7059400987733087616963799308465528228",
"172194048184740837147706244096207367441",
"11008142120288460047478546057630470305",
"118363409637962522163582127842591436849"
]
}
}
]