CVE-2016-6892: Matrixssl

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.

Affected products

• Matrixssl Matrixssl: up to and including 3.8.5

Published 2017-01-05. Last modified 2026-06-17.