Vulnerabilities > Matrixssl > High

DATE CVE VULNERABILITY TITLE RISK
2023-12-22 CVE-2023-24609 Integer Overflow or Wraparound vulnerability in multiple products
Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server.
network
low complexity
matrixssl rambus CWE-190
7.5
2023-01-18 CVE-2022-46505 Improper Initialization vulnerability in Matrixssl
An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data.
network
low complexity
matrixssl CWE-665
7.5
2020-12-30 CVE-2019-16747 Out-of-bounds Write vulnerability in Matrixssl
In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a different vulnerability than CVE-2019-14431.
network
low complexity
matrixssl CWE-787
7.5
2017-01-13 CVE-2016-6886 Key Management Errors vulnerability in Matrixssl 3.8.2/3.8.3
The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's modulus for the secret key during RSA key exchange.
network
low complexity
matrixssl CWE-320
7.5
2017-01-13 CVE-2016-6885 Use After Free vulnerability in Matrixssl 3.8.2/3.8.3
The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base zero value for the modular exponentiation.
network
low complexity
matrixssl CWE-416
7.5
2017-01-05 CVE-2016-6892 Use After Free vulnerability in Matrixssl
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.
network
low complexity
matrixssl CWE-416
7.5
2017-01-05 CVE-2016-6891 Out-of-bounds Read vulnerability in Matrixssl
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.
network
low complexity
matrixssl CWE-125
7.5