CVE-2016-6887: Matrixssl

Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days.

The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT attack.

Affected products

• Matrixssl Matrixssl: up to and including 3.8.6

Published 2017-01-13. Last modified 2026-06-17.