← Vulnerability feed

Vulnerability record · CVE-2019-9033 · published 23 February 2019

CVE-2019-9033: Matio project matio out-of-bounds read vulnerability

MMatio Project · Matio

An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell() in mat5.c.

9.1 CVSS 3.0 Critical EPSS 2.1% · top 19.3% CWE-125 · Out-of-bounds read
9.1CVSS 3.0 base score, v2 6.4
2.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell() in mat5.c.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/TeamSeri0us/pocs/tree/master/matio ExploitThird Party Advisory
https://github.com/tbeu/matio/issues/103 Third Party Advisory
https://github.com/TeamSeri0us/pocs/tree/master/matio ExploitThird Party Advisory
https://github.com/tbeu/matio/issues/103 Third Party Advisory

Track CVE-2019-9033 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-50343Matio project matio heap-based buffer overflow vulnerabilityAn issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the …EPSS 0.41%9.8CVE-2019-13107Matio project matio integer overflow vulnerabilityMultiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.cEPSS 1.8%9.1CVE-2019-9037Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer over-read in the function Mat_VarPrint() in mat.c.EPSS 2.3%9.1CVE-2019-9028Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDime…EPSS 2.0%9.1CVE-2019-9030Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in Mat_VarReadNextInfo5() i…EPSS 2.3%9.1CVE-2019-9034Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the functio…EPSS 2.0%9.1CVE-2019-9035Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStr…EPSS 2.3%8.8CVE-2020-19497Matio project matio integer overflow vulnerabilityInteger overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial …EPSS 1.4%

Source: NIST National Vulnerability Database (record CVE-2019-9033), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.