This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-17533 →

DEBIAN-CVE-2019-17533

Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uniniti...

Original description

The description as published by the source.

Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libmatio

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-4"}]}]

Debian:13 libmatio

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-4"}]}]

Debian:14 libmatio

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-4"}]}]

References

advisory security-tracker.debian.org