MatVarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdupvprintf when uninitialized memory is accessed.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libmatio-dev", "binary_version": "1.5.2-1ubuntu1+esm1" }, { "binary_name": "libmatio-dev-dbgsym", "binary_version": "1.5.2-1ubuntu1+esm1" }, { "binary_name": "libmatio-doc", "binary_version": "1.5.2-1ubuntu1+esm1" }, { "binary_name": "libmatio2", "binary_version": "1.5.2-1ubuntu1+esm1" }, { "binary_name": "libmatio2-dbg", "binary_version": "1.5.2-1ubuntu1+esm1" }, { "binary_name": "libmatio2-dbgsym", "binary_version": "1.5.2-1ubuntu1+esm1" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libmatio-dev", "binary_version": "1.5.3-1ubuntu0.1~esm1" }, { "binary_name": "libmatio-doc", "binary_version": "1.5.3-1ubuntu0.1~esm1" }, { "binary_name": "libmatio2", "binary_version": "1.5.3-1ubuntu0.1~esm1" }, { "binary_name": "libmatio2-dbgsym", "binary_version": "1.5.3-1ubuntu0.1~esm1" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libmatio-dev", "binary_version": "1.5.11-1ubuntu0.1~esm1" }, { "binary_name": "libmatio-doc", "binary_version": "1.5.11-1ubuntu0.1~esm1" }, { "binary_name": "libmatio4", "binary_version": "1.5.11-1ubuntu0.1~esm1" }, { "binary_name": "libmatio4-dbgsym", "binary_version": "1.5.11-1ubuntu0.1~esm1" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "medium", "binaries": [ { "binary_name": "libmatio-dev", "binary_version": "1.5.17-3ubuntu0.1~esm1" }, { "binary_name": "libmatio-doc", "binary_version": "1.5.17-3ubuntu0.1~esm1" }, { "binary_name": "libmatio9", "binary_version": "1.5.17-3ubuntu0.1~esm1" }, { "binary_name": "libmatio9-dbgsym", "binary_version": "1.5.17-3ubuntu0.1~esm1" } ] }