{"action":"Upgrade libmatio to 1.5.17-4 or later.","affected":[{"fixed":"1.5.17-4","introduced":"0"}],"component":"libmatio","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.5.17-4"],"id":"tcs_01M5NE0NGCBFAHDJPZ1DNR4H36","modified_at":"2026-09-21T07:03:07.620693975Z","published_at":"2019-10-13T02:15:12.220Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-17533","https://security-tracker.debian.org/tracker/CVE-2019-17533"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-17533","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-17533"}],"summary":"Mat_VarReadNextInfo4 in mat4.c in MATIO 1.5.17 omits a certain '\\0' character, leading to a heap-based buffer over-read in strdup_vprintf when uninitialized memory is accessed."}