CVE-2016-6886: Matrixssl

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's modulus for the secret key during RSA key exchange.

Affected products

• Matrixssl Matrixssl: up to and including 3.8.3

Published 2017-01-13. Last modified 2026-06-17.