Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-54r5-8767-w6vq

Опубликовано: 30 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

EPSS

Процентиль: 16%
0.00049
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 1 месяца назад

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

CVSS3: 9.8
nvd
около 1 месяца назад

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

CVSS3: 9.8
debian
около 1 месяца назад

An issue was discovered in matio 1.5.28. A heap-based memory corruptio ...

EPSS

Процентиль: 16%
0.00049
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-122