What’s Vulnerable › Vulnerabilities

CVE-2019-10914

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-04-08 · updated 2026-06-17
• Weakness: CWE-295

Description

pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c.

Affected products

• Inside Secure MatrixSSL: through 4.0.2

References

• https://bugs.chromium.org/p/project-zero/issues/detail?id=1785
• https://github.com/matrixssl/matrixssl/issues/26
• https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-open
• https://www.openwall.com/lists/oss-security/2019/02/15/1
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1785
• https://github.com/matrixssl/matrixssl/issues/26
• https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-open
• https://www.openwall.com/lists/oss-security/2019/02/15/1

Get alerted when CVE-2019-10914 or the next vulnerability affects your stack