CVE-2022-1515

Published: May 2, 2022Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

A memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via a crafted file. This issue can potentially result in DoS.

Affected (1)

Products: Matio Project: Matio

Matio Project

1 product

Matio

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Matio Project Matio	Before 1.5.22

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (4)

https://bugzilla.redhat.com/show_bug.cgi?id=2079986

Source: patrick@puiterwijk.org

Issue TrackingPatchThird Party Advisory

https://github.com/tbeu/matio/issues/186

Source: patrick@puiterwijk.org

ExploitThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2079986

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://github.com/tbeu/matio/issues/186

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.