CVE-2025-50343

Description

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

PUBLISHED Reserved 2025-06-16 | Published 2025-12-30 | Updated 2025-12-30 | Assigner mitre

References

github.com/tbeu/matio/issues/275

github.com/...ia/POC/blob/main/matio/CVE-2025-50343/matio.md

cve.org (CVE-2025-50343)

nvd.nist.gov (CVE-2025-50343)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.