Vulnerabilities > CVE-2019-17533 - Use of Uninitialized Resource vulnerability in multiple products

047910
CVSS 8.2 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
matio-project
debian
CWE-908

Summary

Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed.

Vulnerable Configurations

Part Description Count
Application
Matio_Project
1
OS
Debian
1

Common Weakness Enumeration (CWE)