CVE-2025-50343 Details

A heap-based memory corruption vulnerability has been identified in the Matio library version 1.5.28. The issue arises in the Mat_VarCreateStruct() function when the nfields parameter does not align with the actual number of strings in the fields array. This mismatch can lead to out-of-bounds memory reads and improper memory deallocations during cleanup, potentially causing a segmentation fault or heap corruption. The vulnerability exists because the function does not validate that the fields array contains the expected number of non-NULL strings, allowing uninitialized memory to be accessed and freed incorrectly, which can result in undefined behavior.

It is recommended to add validation in the Mat_VarCreateStruct() function to ensure that the fields parameter is either NULL (when nfields is 0) or contains exactly nfields non-NULL pointers.