CVE-2020-36428
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in...
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
- Record
CVE-2020-36428- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
- Record
CVE-2020-36428- Updated
- 2026-11-02
EUVDEUVD-2020-23956 No score
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
- Record
EUVD-2020-23956- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7vx7-pfcr-mqc8 No score
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in...
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
- Record
GHSA-7vx7-pfcr-mqc8- Weakness
- CWE-787
- Updated
- 2026-11-02
OSV
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
- Record
CVE-2020-36428- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-36428
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
- Record
DEBIAN-CVE-2020-36428- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2020-36428
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
- Record
UBUNTU-CVE-2020-36428- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2022-0465 No score
Updated matio packages fix security vulnerability
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4). (CVE-2020-36428)
matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry), related to use of HDF5 1.12.0. (CVE-2021-36977)
- Record
MGASA-2022-0465- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:10235-1 No score
Security update for matio
This update for matio fixes the following issues:
Update to version 1.5.23:
- Fixed testsuite regression from version 1.5.22.
Changes from version 1.5.22:
- Added support for reading large MAT file.
- Updated cmake-conan to version 0.17.0.
- Fixed CMake build with Conan (MATIO_USE_CONAN:BOOL=ON).
- Fixed data type when reading 16-bit character data from HDF5 MAT file.
- Fixed heap-based buffer overflows when reading (crafted) MAT file (CVE-2020-36428, CVE-2021-36977).
- Confirmed compatibility with HDF5 v1.13.0 and v1.13.1.
- Several other fixes, for example for memory leaks.
- Record
openSUSE-SU-2022:10235-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12079-1 No score
libmatio-devel-1.5.23-1.1 on GA media
These are all security issues fixed in the libmatio-devel-1.5.23-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12079-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libmatioDebian:12 |
before 1.5.22-1 | 1.5.22-1 |
libmatioDebian:13 |
before 1.5.22-1 | 1.5.22-1 |
libmatioDebian:14 |
before 1.5.22-1 | 1.5.22-1 |
matioMageia:8 From an advisory covering 2 CVEs |
before 1.5.23-1.mga8 | 1.5.23-1.mga8 |
libmatioUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 1.5.19-21.5.21-11.5.21-1ubuntu0.1~esm1 |
None known |
matioSUSE:Package Hub 15 SP4 From an advisory covering 2 CVEs |
before 1.5.23-bp154.2.3.1 | 1.5.23-bp154.2.3.1 |
matioopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 1.5.23-bp154.2.3.1 | 1.5.23-bp154.2.3.1 |
matioopenSUSE:Tumbleweed |
before 1.5.23-1.1 | 1.5.23-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-36428 is a high vulnerability (CVSS 8.8) in Matio Project Matio, published July 20, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. Fixed in libmatio 1.5.22-1.
References
bugs.chromium.org/p/oss-fuzz/issues/detail?id=21421
github.com/google/oss-fuzz-vulns/blob/main/vulns/matio/OSV-2020-799.yaml
nvd.nist.gov/vuln/detail/CVE-2020-36428
security-tracker.debian.org/tracker/CVE-2020-36428
advisories.mageia.org/MGASA-2022-0465.html
Show 8 moreShow less
bugs.mageia.org/show_bug.cgi?id=31246
lists.opensuse.org/archives/list/[email protected]/thread/DWEPRACQNMJHSGWUZQ5LKNVGWSZ6FMCB
ubuntu.com/security/CVE-2020-36428
cve.org/CVERecord?id=CVE-2020-36428
bugzilla.suse.com/1193873
suse.com/security/cve/CVE-2020-36428