CVE-2021-36977

MEDIUM

matio 1.5.20-1.5.21 - Heap-Based Buffer Overflow via HDF5 Memory Copy

Title source: llm
STIX 2.1

Description

matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry), related to use of HDF5 1.12.0.

References (5)

Core 5
Core References
Patch, Third Party Advisory x_refsource_misc
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31265
Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/HDFGroup/hdf5/issues/272
Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/google/oss-fuzz/issues/4999

Scores

CVSS v3 6.5
EPSS 0.0150
EPSS Percentile 71.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-787
Status published
Products (2)
matio_project/matio 1.5.20
matio_project/matio 1.5.21
Published Jul 20, 2021
Tracked Since Feb 18, 2026