CVE-2025-50343 - Vulnerability Details

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Matio Project	Matio

No data.

References

Link	Providers
https://github.com/tbeu/matio/issues/275
https://github.com/zakkanijia/POC/blob/main/matio/CVE-2025-50343/matio.md
https://nvd.nist.gov/vuln/detail/CVE-2025-50343
https://www.cve.org/CVERecord?id=CVE-2025-50343

History

Wed, 21 Oct 2026 17:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-122
CPEs	cpe:2.3:a:matio_project:matio:1.5.28:::::::*
Metrics	cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Wed, 21 Oct 2026 17:15:00 +0000

Type	Values Removed	Values Added
Description	An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption. NOTE: Multiple third-parties note that the available evidence does not demonstrate a vulnerability exploitable through an attacker-controlled input path.	DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Metrics	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 30 Sep 2026 18:00:00 +0000

Type	Values Removed	Values Added
Description	An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.	An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption. NOTE: Multiple third-parties note that the available evidence does not demonstrate a vulnerability exploitable through an attacker-controlled input path.

Fri, 09 Jan 2026 19:45:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:matio_project:matio:1.5.28:::::::*

Fri, 09 Jan 2026 00:15:00 +0000

Type	Values Removed	Values Added
Title		matio: From CVEorg collector
References		https://nvd.nist.gov/vuln/detail/CVE-2025-50343 https://www.cve.org/CVERecord?id=CVE-2025-50343

Mon, 05 Jan 2026 12:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Matio Project Matio Project matio
Vendors & Products		Matio Project Matio Project matio

Fri, 02 Jan 2026 18:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-122
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 30 Dec 2025 20:00:00 +0000

Type	Values Removed	Values Added
Description		An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.
References		https://github.com/tbeu/matio/issues/275 https://github.com/zakkanijia/POC/blob/main/matio/CVE-2025-50343/matio.md