{"id":"CVE-2021-36977","details":"matio (aka MAT File I/O Library) 1.5.20 and 1.5.21 has a heap-based buffer overflow in H5MM_memcpy (called from H5MM_malloc and H5C_load_entry), related to use of HDF5 1.12.0.","modified":"2026-07-08T22:14:57.687752Z","published":"2021-07-20T07:15:07.993Z","related":["openSUSE-SU-2022:10235-1"],"references":[{"type":"ADVISORY","url":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/matio/OSV-2021-440.yaml"},{"type":"REPORT","url":"https://github.com/HDFGroup/hdf5/issues/272"},{"type":"REPORT","url":"https://github.com/google/oss-fuzz/issues/4999"},{"type":"FIX","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31265"},{"type":"FIX","url":"https://github.com/google/oss-fuzz-vulns/commit/37b781ace1b4228fc36483bb7e30c72ea9d4c3d6"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/google/oss-fuzz-vulns","events":[{"introduced":"0"},{"fixed":"37b781ace1b4228fc36483bb7e30c72ea9d4c3d6"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-36977.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/tbeu/matio","events":[{"introduced":"84c8f3d67ef7493b3541ffe16fdfe007a45f3165"},{"last_affected":"8e18058117fcf177d236e68d453d04e20f937598"}],"database_specific":{"cpe":["cpe:2.3:a:matio_project:matio:1.5.20:*:*:*:*:*:*:*","cpe:2.3:a:matio_project:matio:1.5.21:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.5.20"},{"last_affected":"1.5.20"},{"introduced":"1.5.21"},{"last_affected":"1.5.21"}],"source":"CPE_STRING"}}],"versions":["1.5.20","1.5.21","v1.5.21","v1.5.20"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-36977.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}