CVE-2022-43974

MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13

High · published January 9, 2023

CVSS v3.1
8.1
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve remote code execution. This is fixed in 4.6.0.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01798 · 78.3th percentile
Published
2023-01-09T00:00Z
EPSS history
Timeline
  • 09 JAN 00:00Z
    MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13
    cvelistv5