Unscored CVE-2019-10914 EUVD-2019-2628GHSA-rxr9-8674-7xw8

pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509…

Published Apr 8, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c.

References

https://bugs.chromium.org/p/project-zero/issues/detail?id=1785
https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-open
https://github.com/matrixssl/matrixssl/issues/26
https://www.openwall.com/lists/oss-security/2019/02/15/1