MatVarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdupvprintf when uninitialized memory is accessed.
{ "vanir_signatures": [ { "id": "CVE-2019-17533-1307ee52", "signature_type": "Function", "digest": { "function_hash": "205811938888553217331842022420426854759", "length": 3298.0 }, "target": { "file": "src/mat4.c", "function": "Mat_VarReadNextInfo4" }, "source": "https://github.com/tbeu/matio/commit/651a8e28099edb5fbb9e4e1d4d3238848f446c9a", "signature_version": "v1", "deprecated": false }, { "id": "CVE-2019-17533-730e9293", "signature_type": "Line", "digest": { "line_hashes": [ "7059400987733087616963799308465528228", "172194048184740837147706244096207367441", "11008142120288460047478546057630470305", "118363409637962522163582127842591436849" ], "threshold": 0.9 }, "target": { "file": "src/mat4.c" }, "source": "https://github.com/tbeu/matio/commit/651a8e28099edb5fbb9e4e1d4d3238848f446c9a", "signature_version": "v1", "deprecated": false } ] }