MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HMatrixssl
APPMatrixssl< 4.2.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSSMemory
CWE
Related vulnerabilities
CVE-2019-14431CRITICAL9.8PL ✓same product
MatrixSSL DTLS: heap buffer overflow umożliwiający RCE
CVE-2019-10914CRITICAL9.8PL ✓same product
Stack-based buffer overflow w MatrixSSL podczas weryfikacji certyfikatu X.509
CVE-2017-2780CRITICAL9.8PL ✓same product
Heap buffer overflow w parsowaniu certyfikatów X.509 w MatrixSSL
CVE-2017-2781CRITICAL9.8PL ✓same product
Przepełnienie bufora heap w parsowaniu certyfikatów X509 w MatrixSSL
CVE-2016-6890CRITICAL9.8PL ✓same product
Heap-based buffer overflow w MatrixSSL via pole Subject Alt Name certyfikatu X.509