Description (CNA)
A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdup_vprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| tbeu / matio | affected 1.5.28 |
CWE
CWE-122, CWE-119
References
- https://vuldb.com/?id.299802
- https://vuldb.com/?ctiid.299802
- https://vuldb.com/?submit.510781
- https://github.com/tbeu/matio/issues/269
- https://github.com/tbeu/matio/issues/269#issue-2883920922
ADP enrichment
No English description supplied.