← Vulnerability feed

Vulnerability record · CVE-2020-19497 · published 21 July 2021

CVE-2020-19497: Matio project matio integer overflow vulnerability

MMatio Project · Matio

Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.

8.8 CVSS 3.1 High EPSS 1.4% · top 29.2% CWE-190 · Integer overflow
8.8CVSS 3.1 base score, v2 6.8
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other unspecified impacts.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/tbeu/matio/commit/5fa49ef9fc4368fe3d19b5fdaa36d8fa5e7f4606 PatchThird Party Advisory
https://github.com/tbeu/matio/issues/121 ExploitPatchThird Party Advisory
https://github.com/tbeu/matio/commit/5fa49ef9fc4368fe3d19b5fdaa36d8fa5e7f4606 PatchThird Party Advisory
https://github.com/tbeu/matio/issues/121 ExploitPatchThird Party Advisory

Track CVE-2020-19497 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-50343Matio project matio heap-based buffer overflow vulnerabilityAn issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the …EPSS 0.41%9.8CVE-2019-13107Matio project matio integer overflow vulnerabilityMultiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.cEPSS 1.8%9.1CVE-2019-9037Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer over-read in the function Mat_VarPrint() in mat.c.EPSS 2.3%9.1CVE-2019-9028Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDime…EPSS 2.0%9.1CVE-2019-9030Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in Mat_VarReadNextInfo5() i…EPSS 2.3%9.1CVE-2019-9033Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension…EPSS 2.1%9.1CVE-2019-9034Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the functio…EPSS 2.0%9.1CVE-2019-9035Matio project matio out-of-bounds read vulnerabilityAn issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStr…EPSS 2.3%

Source: NIST National Vulnerability Database (record CVE-2020-19497), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.