9.0
Critical
CVE-2023-4020 An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon…
Description
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GSDK 1.0 | 1.0 → < 4.4.0 | 4.4.0 |
Other CVEs of GSDK
The 12 CVEs of GSDK →
CVE-2024-22473
TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices
6.8
Medium
CVE-2024-0240
A memory leak in the Silicon Labs' Bluetooth stack for EFR32 products may cause memory to be exhausted when sending…
6.5
Medium
CVE-2023-6874
Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number
7.5
High
CVE-2023-6387
A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a…
7.5
High