CVE-2025-50343

CVE-2025-50343 is a critical heap-based memory corruption vulnerability affecting matio 1.5.28, specifically within the Mat_VarCreateStruct() function. This flaw arises from a mismatch between the nfields value and the actual number of strings in the fields array, leading to out-of-bounds reads and invalid memory frees. With a CVSS score of 9.8, this vulnerability is easily exploitable over a network with low attack complexity, potentially resulting in complete compromise of confidentiality, integrity, and availability through segmentation faults or heap corruption. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.