CVE-2019-16747

In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a different vulnerability than CVE-2019-14431.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-12-30

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Matrixssl (Matrixssl)

References

• https://github.com/matrixssl/matrixssl/blob/4-2-2-open/doc/CHANGES_v4.x.md
• https://github.com/matrixssl/matrixssl/issues/33
• https://github.com/matrixssl/matrixssl/releases/tag/4-2-2-open