CVE-2019-9035

CVE-2019-9035 affects the MAT file I/O library libmatio.a in matio (version 1.5.13). A stack-based buffer over-read occurs in the function ReadNextStructField() in mat5.c, as documented across multiple sources. The vulnerability is confirmed by CVSS details (NVD) indicating high impact on confide...

CVE-2019-9028

The CVE-2019-9028 entry concerns the MAT File I/O Library (libmatio.a in matio) version 1.5.13. A stack-based buffer over-read occurs in InflateDimensions() (inflate.c) when invoked from ReadNextCell in mat5.c. This is the concrete root cause identified in multiple connected records. The vulnerab...

CVE-2019-9030

The CVE-2019-9030 issue affects libmatio.a in matio (MAT File I/O Library) version 1.5.13. A stack-based buffer over-read occurs in Mat_VarReadNextInfo5() found in mat5.c. The available connected documents (NVD, SUSE, Red Hat, CNVD/CNVD-like feeds, OSV/DEBIAN) consistently describe this same vuln...

CVE-2019-9034

CVE-2019-9034 affects the MAT file I/O library matio (libmatio.a) in version 1.5.13. It describes a stack-based buffer over-read in the memcpy call within the function ReadNextCell() in mat5.c. The connected documents confirm the affected component but do not provide a remediation version or patc...

CVE-2019-9037

The CVE-2019-9037 entry concerns the MAT file I/O library matio, specifically libmatio.a in version 1.5.13. The vulnerability is a buffer over-read in Mat_VarPrint() located in mat.c. Publicly documented details across multiple sources (NVD, CNVD, OSV, OSV Ubuntu, SUSE, Nessus notes) identify the...

CVE-2019-9037

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a buffer over-read in the function MatVarPrint in mat.c...

CVE-2019-9028

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read in the function InflateDimensions in inflate.c when called from ReadNextCell in mat5.c...

CVE-2019-9035

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField in mat5.c...

CVE-2019-9033

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell in mat5.c...

CVE-2019-9034

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell in mat5.c...

CVE-2019-9033

An issue was discovered in libmatio.a in matio aka MAT File I/O Library 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadNextCell in mat5.c...

CVE-2019-9021

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the...

CVE-2019-9023

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in...

CVE-2019-9021

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the...

Heap overflow

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in...

CVE-2019-9023

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in...

CVE-2019-9022

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

CVE-2019-9021

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the...

CVE-2019-9021

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the...

CVE-2019-9023

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A number of heap-based buffer over-read instances are present in mbstring regular expression functions when supplied with invalid multibyte data. These occur in...