TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted message.
https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-7769