CVE-2022-1515: 
NixOS vulnerability analysis and mitigation

A memory leak vulnerability was discovered in matio version 1.5.21 and earlier, specifically in the Mat_VarReadNextInfo5() function within mat5.c. The vulnerability was disclosed on May 2, 2022, affecting the matio library's file handling capabilities (NVD, Ubuntu).

The vulnerability occurs in the Mat_VarReadNextInfo5() function when processing crafted files. The issue manifests as a memory leak that can occur through multiple allocation paths, with direct leaks of 320 bytes in 4 objects and indirect leaks of various sizes. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium), with attack vector being Local, attack complexity Low, and requiring user interaction (Ubuntu).

The memory leak vulnerability can potentially result in a Denial of Service (DoS) condition. When exploited, the issue affects system resource management, potentially leading to degraded performance or system instability (NVD, Ubuntu).

The vulnerability has been fixed in matio versions 1.5.22 and later. Ubuntu has released security updates for affected versions: Ubuntu 22.04 LTS (libmatio11 - 1.5.21-1ubuntu0.1~esm1) and Ubuntu 20.04 LTS (libmatio9 - 1.5.17-3ubuntu0.1~esm2). Users are advised to update their systems to the patched versions (Ubuntu Notice, Red Hat).