An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.
References
| Link | Resource |
|---|---|
| https://github.com/tbeu/matio/issues/275 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/zakkanijia/POC/blob/main/matio/CVE-2025-50343/matio.md | Exploit Third Party Advisory |
| https://github.com/tbeu/matio/issues/275 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/zakkanijia/POC/blob/main/matio/CVE-2025-50343/matio.md | Exploit Third Party Advisory |
Configurations
History
09 Jan 2026, 19:38
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Matio Project matio
Matio Project |
|
| CPE | cpe:2.3:a:matio_project:matio:1.5.28:*:*:*:*:*:*:* | |
| References | () https://github.com/tbeu/matio/issues/275 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://github.com/zakkanijia/POC/blob/main/matio/CVE-2025-50343/matio.md - Exploit, Third Party Advisory |
02 Jan 2026, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-122 | |
| References | () https://github.com/tbeu/matio/issues/275 - | |
| References | () https://github.com/zakkanijia/POC/blob/main/matio/CVE-2025-50343/matio.md - |
30 Dec 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-30 20:16
Updated : 2026-01-09 19:38
NVD link : CVE-2025-50343
Mitre link : CVE-2025-50343
CVE.ORG link : CVE-2025-50343
JSON object : View
Products Affected
matio_project
- matio
CWE
CWE-122
Heap-based Buffer Overflow