Vulnerability record · CVE-2019-10914 · published 8 April 2019

CVE-2019-10914: Matrixssl improper certificate validation vulnerability

MMatrixssl · Matrixssl

pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c.

9.8 CVSS 3.0 Critical EPSS 1.4% · top 27.9% CWE-295 · Improper certificate validationCWE-787 · Out-of-bounds write

9.8CVSS 3.0 base score, v2 7.5

1.4%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

MMatrixssl Matrixssl

References

Link	Tags
https://bugs.chromium.org/p/project-zero/issues/detail?id=1785	Issue TrackingPatchThird Party Advisory
https://github.com/matrixssl/matrixssl/issues/26	PatchThird Party Advisory
https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-open	Release NotesThird Party Advisory
https://www.openwall.com/lists/oss-security/2019/02/15/1
https://bugs.chromium.org/p/project-zero/issues/detail?id=1785	Issue TrackingPatchThird Party Advisory
https://github.com/matrixssl/matrixssl/issues/26	PatchThird Party Advisory
https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-open	Release NotesThird Party Advisory
https://www.openwall.com/lists/oss-security/2019/02/15/1

Track CVE-2019-10914 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-43974Matrixssl integer overflow vulnerabilityMatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause…EPSS 1.7%9 Jan 2023 9.8CVE-2019-14431Matrixssl out-of-bounds write vulnerabilityIn MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of up to 256…EPSS 3.6%29 Jul 2019 9.8CVE-2019-13470Matrixssl out-of-bounds read vulnerabilityMatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling.EPSS 1.6%9 Jul 2019 9.8CVE-2017-2780Matrixssl out-of-bounds write vulnerabilityAn exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially …EPSS 2.3%22 Jun 2017 9.8CVE-2017-2781Matrixssl out-of-bounds write vulnerabilityAn exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially …EPSS 2.3%22 Jun 2017 9.8CVE-2016-6890Matrixssl memory buffer overflow vulnerabilityHeap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 cer…EPSS 6.4%5 Jan 2017 9.1CVE-2017-2782Matrixssl integer overflow vulnerabilityAn integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 cer…EPSS 1.0%22 Jun 2017 7.5CVE-2023-24609Matrixssl integer overflow vulnerabilityMatrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in t…EPSS 0.73%22 Dec 2023

Source: NIST National Vulnerability Database (record CVE-2019-10914), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.