CVE-2016-6891: Matrixssl

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.

Affected products

• Matrixssl Matrixssl: up to and including 3.8.5

Published 2017-01-05. Last modified 2026-06-17.