VULNERABILITY INTELLIGENCE

CVE-2016-8671

CVSS score5.9 MEDIUM

EPSS probability1.15%

CISA KEVNot currently listed

Published2017-01-13

Last modified2026-06-17

Description

The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6887.