Matio
Vendor:
First CVE: Feb 23, 2019 · Active for 7 years
27
Total CVEs
More Total CVEs than 96% of tracked products
6.8
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
7.9
Avg CVSS
Higher Avg CVSS than 71% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Matio over time
Volume of CVEsAvg CVSS Base Score
First CVE
Feb 23, 2019
7 years ago
Most Recent CVE
Dec 30, 2025
209 days ago
CVE Severity & Scoring
Matio27 CVEs
26%
44%
30%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (3.7%)
Network26 (96.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low27 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None16 (59.3%)
Unknown0 (0.0%)
Required11 (40.7%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None27 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (27 CVEs).
27 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-50343CRITICAL An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the | Dec 30, 2025 | 9.8 | 31 | NO | NO |
CVE-2019-13107CRITICAL Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c | Jun 30, 2019 | 9.8 | 30 | NO | NO |
CVE-2019-9033CRITICAL An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for the "Rank and Dimension" feature in the function ReadN | Feb 23, 2019 | 9.1 | 29 | NO | NO |
CVE-2019-9035CRITICAL An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField() in mat5.c. | Feb 23, 2019 | 9.1 | 28 | NO | NO |
CVE-2019-9034CRITICAL An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell() in mat5.c. | Feb 23, 2019 | 9.1 | 28 | NO | NO |
CVE-2019-9030CRITICAL An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in Mat_VarReadNextInfo5() in mat5.c. | Feb 23, 2019 | 9.1 | 28 | NO | NO |
CVE-2019-9028CRITICAL An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function InflateDimensions() in inflate.c when call | Feb 23, 2019 | 9.1 | 28 | NO | NO |
CVE-2020-19497HIGH Integer overflow vulnerability in Mat_VarReadNextInfo5 in mat5.c in tbeu matio (aka MAT File I/O Library) 1.5.17, allows attackers to cause a Denial of Service or possibly other un | Jul 21, 2021 | 8.8 | 27 | NO | NO |
CVE-2020-36428HIGH matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4). | Jul 20, 2021 | 8.8 | 27 | NO | NO |
CVE-2019-17533HIGH Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed. | Oct 13, 2019 | 8.2 | 27 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (27 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (27 CVEs).
Media Mentions
Signals from CVEs in this product scope (27 CVEs).
Top CNAs Publishing CVEs For Matio
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.5.28 | 3 | 8.7 | 0.5% | 0 | 0 |
| 1.5.21 | 1 | 6.5 | 1.5% | 0 | 0 |
| 1.5.20 | 1 | 6.5 | 1.5% | 0 | 0 |
| 1.5.17 | 7 | 7.1 | 1.1% | 0 | 0 |
| 1.5.13 | 13 | 8.2 | 1.9% | 0 | 0 |