VYPR
Unrated severityOSV Advisory· Published Dec 30, 2025· Updated Jan 2, 2026

CVE-2025-50343

CVE-2025-50343

Description

An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.

Affected products

1
  • Range: v1.5.0, v1.5.0b1, v1.5.1, …

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.