CVE-2019-10914

9.8 criticalEPSS 1.4%

Critical (9.8) in matrixssl matrixssl. EPSS 1.4% chance of exploitation in the next 30 days.

pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWEs: CWE-295, CWE-787
Published: 2019-04-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

matrixssl:matrixssl

References

https://bugs.chromium.org/p/project-zero/issues/detail?id=1785
https://github.com/matrixssl/matrixssl/issues/26
https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-open
https://www.openwall.com/lists/oss-security/2019/02/15/1
https://bugs.chromium.org/p/project-zero/issues/detail?id=1785

Check your stack JSON