CVE-2016-6890

Critical

Published: 05/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Heap-based buffer overflow in MatrixSSL before version 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code remotely, posing a significant security risk to systems using MatrixSSL.

Recommendation

It is recommended to upgrade MatrixSSL to version 3.8.6 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.