CVE-2019-9028: Critical severity libmatio vulnerability

Published Feb 23, 2019

Updated

An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDimensions() in inflate.c when called from ReadNextCell in mat5.c.

Affected Software

1 affected component

Matio Project Matio=1.5.13

Event History

Feb 23, 2019

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

Description

Data Sourced

via NVD·12:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-9028?

CVE-2019-9028 is classified as a medium severity vulnerability due to the potential for stack-based buffer over-read.

How do I fix CVE-2019-9028?

To fix CVE-2019-9028, update the libmatio.a library to a version beyond 1.5.13 where the vulnerability has been addressed.

What products are affected by CVE-2019-9028?

CVE-2019-9028 specifically affects version 1.5.13 of the MAT File I/O Library (libmatio.a).

What type of vulnerability is CVE-2019-9028?

CVE-2019-9028 is a stack-based buffer over-read vulnerability that can lead to information disclosure.

Where can I find more information about CVE-2019-9028?

Additional information regarding CVE-2019-9028 can be found in bug reports and related discussions on GitHub.