PT-2019-16067 · Matio · Matio

Gutiniaoo · Published 2019-12-27 · Updated 2024-06-15 · CVE-2019-20052

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions matio version 1.5.17

Description A memory leak was discovered in the Mat VarCalloc function in mat.c due to the SafeMulDims function not considering the case where rank equals 0.

Recommendations For matio version 1.5.17, consider applying a patch or fix that addresses the issue in the SafeMulDims function to prevent memory leaks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2019-20052

MGASA-2021-0285

MGASA-2021-0558

OPENSUSE-SU-2024:11040-1

Affected Products

Matio

References · 14

• 🔥 https://github.com/tbeu/matio/issues/131 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:11040-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0558.html · Security Note
• https://advisories.mageia.org/MGASA-2021-0285.html · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0285 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20052 · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0558 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-20052 · Vendor Advisory
• https://github.com/tbeu/matio/commit/a47b7cd3aca70e9a0bddf8146eb4ab0cbd19c2c3 · Note
• https://suse.com/security/cve/CVE-2019-20017 · Note
• https://bugs.mageia.org/show_bug.cgi?id=29164 · Note
• https://suse.com/security/cve/CVE-2019-20052 · Note
• https://bugs.mageia.org/show_bug.cgi?id=27969 · Note
• https://suse.com/security/cve/CVE-2019-17533 · Note