Vulnerability Details : CVE-2019-13107
Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c
Vulnerability category: Overflow
Products affected by CVE-2019-13107
- cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
- cpe:2.3:a:matio_project:matio:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-13107
0.61%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 67 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-13107
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2019-13107
-
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-13107
-
https://github.com/tbeu/matio/releases/tag/v1.5.16
Release matio 1.5.16 · tbeu/matio · GitHubRelease Notes
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7AE25FWDBPC7KLVMPLHT4G64O4GISQQ/
[SECURITY] Fedora 31 Update: matio-1.5.17-1.fc31 - package-announce - Fedora Mailing-ListsMailing List;Third Party Advisory
-
https://github.com/tbeu/matio/pull/118
Check integer overflows (CVE-2019-13107) by tbeu · Pull Request #118 · tbeu/matio · GitHubPatch
-
https://github.com/tbeu/matio/compare/f8cd397...fabac6c
Comparing f8cd397...fabac6c · tbeu/matio · GitHubPatch
Jump to