Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-50343

Опубликовано: 30 дек. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

РелизСтатусПримечание
devel

deferred

2026-01-05
esm-apps-legacy/xenial

deferred

2026-01-05
esm-apps/bionic

deferred

2026-01-05
esm-apps/focal

deferred

2026-01-05
esm-apps/jammy

deferred

2026-01-05
esm-apps/noble

deferred

2026-01-05
esm-apps/resolute

deferred

2026-01-05
esm-apps/xenial

ignored

end of ESM support, was deferred [2026-01-05]
esm-infra-legacy/trusty

deferred

2026-01-05
jammy

deferred

2026-01-05

Показывать по

EPSS

Процентиль: 29%
0.00356
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 7.3
redhat
8 месяцев назад

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

CVSS3: 9.8
nvd
8 месяцев назад

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

CVSS3: 9.8
debian
8 месяцев назад

An issue was discovered in matio 1.5.28. A heap-based memory corruptio ...

CVSS3: 9.8
github
8 месяцев назад

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

EPSS

Процентиль: 29%
0.00356
Низкий

9.8 Critical

CVSS3