CVE-2019-9028 (NVD)

2019-02-23

An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDimensions() in inflate.c when called from ReadNextCell in mat5.c.

Products Matio
Type Out-of-bounds Read (CWE-125)
First patch - None (likely due to unavailable code)
Links https://github.com/TeamSeri0us/pocs/tree/master/matio
https://github.com/tbeu/matio/issues/103