CVE-2016-8671: Matrixssl

Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days.

The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6887.

Affected products

• Matrixssl Matrixssl: up to and including 3.8.6

Published 2017-01-13. Last modified 2026-06-17.