CVE-2019-9034: Critical severity libmatio vulnerability

Published Feb 23, 2019

Updated

An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell() in mat5.c.

Affected Software

1 affected component

Matio Project Matio=1.5.13

Event History

Feb 23, 2019

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

Description

Data Sourced

via NVD·12:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2019-9034?

CVE-2019-9034 is classified as a high severity vulnerability due to its potential for causing information leakage through a stack-based buffer over-read.

How do I fix CVE-2019-9034?

To fix CVE-2019-9034, you should update to the latest version of matio beyond 1.5.13 that addresses this vulnerability.

What systems are affected by CVE-2019-9034?

CVE-2019-9034 specifically affects the matio library version 1.5.13 implementing the MAT File I/O Library.

What type of vulnerability is CVE-2019-9034?

CVE-2019-9034 is a stack-based buffer over-read vulnerability identified in the ReadNextCell() function of mat5.c.

Can CVE-2019-9034 be exploited remotely?

CVE-2019-9034 does not involve remote exploitation but can be triggered locally by processing specially crafted files.