MAL-2022-3853 Malicious code in install-matlab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30158f23b62785902459e1f6608e012a2eb04dc47f768030cd0958b61b8da9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in install-matlab

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MATLAB MATIO ReadInt32DataDouble Buffer Overflow DoS

The vulnerability of the ReadInt32DataDouble function in the MATLAB MATIO library relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

mat5.c library Heap Buffer Overflow DoS

The vulnerability of the MatVarReadNextInfo5 function in the mat5.c library for reading and writing MATLAB MATIO files is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Security Update for Microsoft Visual Studio Code MATLAB Extension (March 2021)

The Microsoft Visual Studio Code MATLAB extension is prior to version 2.0.1. It is, therefore, affected by a remote code execution vulnerability via crafted workspace configuration. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versi...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in IsGrayImage

Detailed Report: https://oss-fuzz.com/testcase?key=5979093489811456 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: IsGrayImage WriteMATLABImag...

Denial Of Service (DoS)

xen is vulnerable to denial of service. The unofficial MATLAB extension for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings...

matio integer overflow vulnerability

matio is a C library for reading and writing MATLAB MAT files. matio version 1.5.17 has an integer overflow vulnerability in mat5.c in MatVarReadNextInfo5. An attacker could exploit this vulnerability to cause a denial of service...

MAT File I/O Library Buffer Error Vulnerability

The MAT File I/O Library matio is an open source, C language library for reading and writing binary MATLAB MAT files. A buffer error vulnerability exists in matio a.k.a. MAT File I O Library 1.5.20 and 1.5.21, which stems from a heap-based buffer overflow in the H5MM memcpy called from the H5MM...

CVE-2021-28967

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings...

CVE-2021-28967

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings...

Design/Logic Flaw

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings...

CVE-2021-28967

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings...

CVE-2021-28967

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings...

CVE-2021-28967

The CVE concerns the unofficial MATLAB extension for Visual Studio Code prior to version 2.0.1. The underlying issue is in lint configuration settings that allow an attacker to execute arbitrary code via a crafted workspace. Reported impact in the sources indicates remote code execution with high...

Xavier Hahn vscode-matlab default configuration issues and vulnerabilities

Xavier Hahn vscode-matlab is an open source application by Xavier Hahn. MATLAB extension before 2.0.1 suffers from a Default Configuration Issue vulnerability that can be exploited by an attacker to execute arbitrary code via a crafted workspace...

CVE-2021-28967: Undefined Security Weakness

The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings...

PT-2021-18005 · Unknown · Matlab Extension For Visual Studio Code

Name of the Vulnerable Software and Affected Versions: MATLAB extension for Visual Studio Code versions prior to 2.0.1 Description: The issue allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings. This is due to a problem in the unofficial MATLA...

matlab-array-utils (>=1.0.1, <=1.0.2), react-plotter (0.0.1) potentially affected by unknown CVE via plotter (0.5.0)

plotter NPM version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on plotter and may be impacted: - matlab-array-utils =1.0.1, =1.0.2 - react-plotter 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-65XX-C85X-WG76...

matlab-array-utils (>=1.0.1, <=1.0.2), react-plotter (0.0.1) potentially affected by unknown CVE via plotter (0.5.0)

plotter NPM version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on plotter and may be impacted: - matlab-array-utils =1.0.1, =1.0.2 - react-plotter 0.0.1 Source cves: unknown CVE Source advisory: GHSA-65XX-C85X-WG76...