A stack-based buffer over-read exists in Mat_VarReadNextInfo5 in mat5.c in matio 1.5.17.
matio project matio 1.5.17