CVE-2019-13107

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73...

9.8 CriticalFix available

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.77%Up 0.7 points since Apr 14, 2021

What each source reports

NVD Score used 9.8

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

Record: CVE-2019-13107
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-190
Updated: 2026-11-02

CVE List No score

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

Record: CVE-2019-13107
Updated: 2026-11-02

EUVDEUVD-2019-4648 No score

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

Record: EUVD-2019-4648
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8w3w-hr8q-fg4g 9.8

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73...

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

Record: GHSA-8w3w-hr8q-fg4g
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-190
Updated: 2026-11-02

OSV 9.8

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

Record: CVE-2019-13107
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-13107 9.8

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

Record: DEBIAN-CVE-2019-13107
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2019-13107 9.8

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c

Record: UBUNTU-CVE-2019-13107
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2020-0202 No score

Updated matio packages fix security vulnerability

Updated matio packages fix a security vulnerability:

Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c (CVE-2019-13107).

The matio package has been updated to version 1.5.16 to fix this issue.

Also:

The scilab package has been updated to version 6.1.0.
The java-atk-wrapper package fixes an error (Cannot run program "/opt/X11/bin/xprop") when using java accessibility.
The jogl2 package fixes a crach with current versions of gallium driver.

Record: MGASA-2020-0202
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`libmatio` Debian:12	before 1.5.17-3	1.5.17-3
`libmatio` Debian:13	before 1.5.17-3	1.5.17-3
`libmatio` Debian:14	before 1.5.17-3	1.5.17-3
`matio` Mageia:7	before 1.5.16-1.mga7	1.5.16-1.mga7
`scilab` Mageia:7	before 6.1.0-1.mga7	6.1.0-1.mga7
`java-atk-wrapper` Mageia:7	before 0.33.2-5.1.mga7	0.33.2-5.1.mga7
`jogl2` Mageia:7	before 2.3.2-8.1.mga7	2.3.2-8.1.mga7
`libmatio` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 1.5.1-11.5.2-11.5.2-1ubuntu11.5.2-1ubuntu1+esm1	None known
`libmatio` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 1.5.2-3build21.5.3-11.5.3-1ubuntu0.1~esm1	None known
`libmatio` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 1.5.10-11.5.11-11.5.11-1ubuntu0.1~esm1	None known

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-13107 is a critical vulnerability (CVSS 9.8) in Matio Project Matio, published June 30, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.77%, the 78th percentile. Fixed in libmatio 1.5.17-3.

References

Show 7 moreShow less