PT-2019-16067 · Matio · Matio

Gutiniaoo · Publicado 2019-12-27 · Atualizado 2024-06-15 · CVE-2019-20052

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions matio version 1.5.17

Description A memory leak was discovered in the Mat VarCalloc function in mat.c due to the SafeMulDims function not considering the case where rank equals 0.

Recommendations For matio version 1.5.17, consider applying a patch or fix that addresses the issue in the SafeMulDims function to prevent memory leaks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

CVE-2019-20052

MGASA-2021-0285

MGASA-2021-0558

OPENSUSE-SU-2024:11040-1

Produtos afetados

Matio

Referências · 14

• 🔥 https://github.com/tbeu/matio/issues/131 · Exploit
• https://github.com/tbeu/matio/commit/a47b7cd3aca70e9a0bddf8146eb4ab0cbd19c2c3 · Nota
• https://suse.com/security/cve/CVE-2019-20017 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11040-1 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=29164 · Nota
• https://suse.com/security/cve/CVE-2019-20052 · Nota
• https://advisories.mageia.org/MGASA-2021-0558.html · Nota de Segurança
• https://advisories.mageia.org/MGASA-2021-0285.html · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=27969 · Nota
• https://osv.dev/vulnerability/MGASA-2021-0285 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-20052 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2021-0558 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-20052 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-17533 · Nota