matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MMmemcpy (called from H5MMmalloc and H5Cloadentry), related to use of HDF5 1.12.0.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-36977.json"