Every CVE Search/ Get API key

CVE-2025-2337

tbeu matio mat.c Mat_VarPrint heap-based overflow

5.3 MediumFix available

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Passive

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.60%Up 0.6 points since Mar 17, 2025
90%50%10%1%

What each source reports

CVE List Score used 5.3

tbeu matio mat.c Mat_VarPrint heap-based overflow

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Record
CVE-2025-2337
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 3.0
6.3 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
CVSS 2.0
7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR
Weakness
CWE-122, CWE-119
Updated
2026-11-02
EUVDEUVD-2025-6661 5.3

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Record
EUVD-2025-6661
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Updated
2026-11-02
GitHub AdvisoriesGHSA-jcxj-fvhg-33mx 5.3

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This...

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Record
GHSA-jcxj-fvhg-33mx
CVSS 4.0
5.3 MediumCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Weakness
CWE-119
Updated
2026-11-02
NVD 2.1

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Record
CVE-2025-2337
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119, CWE-122
Updated
2026-11-02
OSV 2.1

tbeu matio mat.c Mat_VarPrint heap-based overflow

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Record
CVE-2025-2337
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Weakness
CWE-119, CWE-122
Updated
2026-11-02
OSVDEBIAN-CVE-2025-2337 8.1

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Record
DEBIAN-CVE-2025-2337
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-2337 2.1

A vulnerability, which was classified as critical, has been found in tbeu matio 1.5.28. This issue affects the function Mat_VarPrint of the file src/mat.c. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Record
UBUNTU-CVE-2025-2337
CVSS 4.0
2.1 LowCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS 3.1
6.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVopenSUSE-SU-2026:10002-1 No score

libmatio-devel-1.5.29-1.1 on GA media

These are all security issues fixed in the libmatio-devel-1.5.29-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10002-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20022-1 No score

Security update for matio

This update for matio fixes the following issues:

  • update to version 1.5.29:

    • Fix printing rank-1-variable in Mat_VarPrint
    • Fix array index out of bounds in Mat_VarPrint when printing UTF-8 character data (boo#1239678, CVE-2025-2337)
    • Fix heap-based buffer overflow in strdup_vprintf (boo#1239677, CVE-2025-2338)
    • Changed Mat_VarPrint to print all values of rank-2-variable
    • Several other fixes, for example for access violations in Mat_VarPrint

  • Update to version 1.5.28:

    • Fixed bug writing MAT_T_INT8/MAT_T_UINT8 encoded character array to compressed v5 MAT file (regression of v1.5.12).
    • Fixed bug reading all-zero sparse array of v4 MAT file (regression of v1.5.18).
    • Updated C99 snprintf.c.
    • CMake: Enabled testing.
    • Several other fixes, for example for access violations in Mat_VarPrint.
Record
openSUSE-SU-2026:20022-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libmatio
Debian:12
 before 1.5.23-2+deb12u1, plus listed versions
1.5.23-2
1.5.23-2+deb12u1
libmatio
Debian:13
 before 1.5.28-2
1.5.28-2
libmatio
Debian:14
 before 1.5.28-2
1.5.28-2
libmatio
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.5.1-11.5.2-11.5.2-1ubuntu11.5.2-1ubuntu1+esm1
 None known
libmatio
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.5.2-3build21.5.3-11.5.3-1ubuntu0.1~esm1
 None known
libmatio
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.5.10-11.5.11-11.5.11-1ubuntu0.1~esm1
 None known
libmatio
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1.5.13-31.5.17-31.5.17-3ubuntu0.1~esm11.5.17-3ubuntu0.1~esm2
 None known
libmatio
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
1.5.19-21.5.21-11.5.21-1ubuntu0.1~esm1
 None known
libmatio
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.5.23-21.5.24-11.5.26-11.5.26-1build11.5.26-1build21.5.26-1build3
 None known
libmatio
Ubuntu:25.10
 All versions, plus listed versions
1.5.28-1build11.5.28-2
 None known
matio
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.5.29-1.1
1.5.29-1.1
matio
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 1.5.29-bp160.1.1
1.5.29-bp160.1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-2337 is a medium vulnerability (CVSS 5.3) in Matio Project Matio, published March 16, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 49th percentile. Fixed in libmatio 1.5.23-2+deb12u1.

References

Show 9 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open