CVE-2019-10914

pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c.

• CWE-295
• CWE-787

• https://bugs.chromium.org/p/project-zero/issues/detail?id=1785Issue Tracking, Patch, Third Party Advisory
• https://github.com/matrixssl/matrixssl/issues/26Patch, Third Party Advisory
• https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-openRelease Notes, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2019/02/15/1
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1785Issue Tracking, Patch, Third Party Advisory
• https://github.com/matrixssl/matrixssl/issues/26Patch, Third Party Advisory
• https://github.com/matrixssl/matrixssl/releases/tag/4-0-2-openRelease Notes, Third Party Advisory
• https://www.openwall.com/lists/oss-security/2019/02/15/1

Published

Apr 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10909In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.…5.4
• CVE-2019-1091An information disclosure vulnerability exists when Unistore…
• CVE-2019-10910In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.…9.8
• CVE-2019-10911In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.…7.5
• CVE-2019-10912In Symfony before 2.8.50, 3.x before 3.4.26, 4.x before 4.1.…
• CVE-2019-10913In Symfony before 2.7.51, 2.8.x before 2.8.50, 3.x before 3.…
• CVE-2019-10915A vulnerability has been identified in TIA Administrator (Al…7.8
• CVE-2019-10916A vulnerability has been identified in SIMATIC PCS 7 V8.0 an…8.8
• CVE-2019-10917A vulnerability has been identified in SIMATIC PCS 7 V8.0 an…5.5
• CVE-2019-10918A vulnerability has been identified in SIMATIC PCS 7 V8.0 an…8.8
• CVE-2019-10919A vulnerability has been identified in LOGO! 8 BM (incl. SIP…9.4
• CVE-2019-1092A remote code execution vulnerability exists in the way that…